Enterprise documentation

    Gendo for Enterprise

    Last updated: 7 October 2026

    AI visualisation built for practices that work under NDA. You own every output, your work never trains our models, and your data stays under your control.

    Talk to our teamEnterprise DPA (PDF)

    Contents

    Overview

    Gendo is used by architecture and design practices to explore, iterate and present design ideas. Enterprise teams bring confidential client work into Gendo, so we've built the platform around four commitments.

    01

    You own what you make

    On every paid plan, all intellectual property in your outputs belongs to you, and your prompts and source material stay yours.

    02

    Your work never trains our models

    Prompts, uploads and outputs on paid plans are never used as training data, and our AI providers are contractually barred from training on them.

    03

    Your data stays protected

    Project content is stored in the UK, encrypted at rest and in transit, and logically separated from every other customer.

    04

    You stay in control

    Delete projects at any time, manage your team with role-based access, and add SSO and audit logs as you scale.


    Plans at a glance

    Every paid plan carries the same core protections: you own your outputs, nothing is used for training, and MFA and role-based access come as standard. Enterprise adds identity, governance and customisation for larger practices.

    Capability Studio Studio Scale Enterprise
    Full IP ownership of outputs ✓ ✓ ✓
    No training on your prompts or outputs ✓ ✓ ✓
    Commercial licence ✓ ✓ ✓
    Unlimited rendering ✓ ✓ ✓
    Seats included 5 5 From 20
    Multi-factor authentication ✓ ✓ ✓
    Roles (Viewer, Editor, Admin) at organisation and project level ✓ ✓ ✓
    SSO (SAML) — Add-on Available
    Audit trails and usage analytics — — Add-on
    Custom models — — ✓
    Custom Catalogue: your studio's shared materials library — ✓ ✓
    Dedicated onboarding and priority support — — ✓
    Data Processing Agreement and custom terms Standard terms Standard terms Available
    Billing Monthly or annual Monthly or annual Annual commitment

    SSO setup is done with your IT team during onboarding and typically takes about a week. Enterprise pricing is tailored — talk to our team.


    Ownership and intellectual property

    On every paid plan you own all intellectual property in your outputs, and your prompts remain yours.

    Item Who owns it Where it's set out
    Prompts (briefs, sketches, models, photos, uploads) You and your licensors Terms of Service 9.2
    Outputs (images, video, text) You. Gendo assigns all its rights in outputs to you Terms of Service 9.1
    The Gendo platform, models and documentation Gendo Terms of Service 9.8
    • Confidentiality: On paid plans, your prompts and outputs are your Confidential Information, and Gendo is bound to keep them confidential.
    • How we use your content: Gendo holds a limited licence to store your prompts and outputs in the platform, run the service, and comply with the law. We don't use them for marketing, training or any other purpose.
    • Client deliverables: Because you own the outputs, you can use them commercially, including in client presentations and contract deliverables.
    • Indemnity: Gendo indemnifies you against claims that your use of the platform itself infringes a third party's patent, copyright or trade mark. Enterprise customers can discuss additional indemnity terms covering outputs.

    AI training

    On Studio, Studio Scale and Enterprise, your content is never used to train AI models — by Gendo or by any model provider your content passes through.

    • Our commitment: On paid plans, prompts, uploaded content, project information and generated outputs are never used as training data.
    • Third-party model providers: We engage AI providers under commercial agreements that prohibit training on, or any independent use of, customer data. Data sent to a provider is used only to complete that request and is deleted shortly afterwards.
    • Usage analytics: The usage metrics we collect to run and improve the service exclude prompts and outputs.
    • Free plans: Different terms apply on Free and Educational plans, where content may be used to improve Gendo's models. This is the main reason professional teams choose a paid plan.

    Where your data is hosted and processed

    Project content is stored at rest in the United Kingdom, and most processing runs on Gendo's own infrastructure in the UK and EU.

    Activity Location
    Project content at rest (prompts, uploads, outputs) United Kingdom
    Application processing Gendo's own servers in the EU
    Image generation on Gendo's own GPU infrastructure Primarily UK and EU, with some US capacity
    Generation through third-party model providers May take place outside the UK/EU, including the US. Transient only.
    • International transfers: Where data leaves the UK or EEA, we rely on the EU Standard Contractual Clauses and the UK International Data Transfer Agreement or UK Addendum. Copies are available on request from [email protected].
    • UK/EEA-only processing: Enterprise customers who need processing kept within the UK or EEA can discuss this with us.

    Sub-processors

    We use the third-party providers below to deliver and grow the service. Each one receives only the data needed for its task.

    Sub-processor Purpose Data processed Location
    Amazon Web Services (AWS) Cloud hosting, storage and content delivery Project content (including images and videos), account data, cached copies of images and videos UK, EU; cached copies on global edge network
    RunPod GPU compute for Gendo's own image generation Prompts and images, deleted when each job completes UK, EU, Canada, India, some US
    OpenAI AI model provider Prompts and images, transient US
    Google AI model provider Prompts and images, transient Global (Google global endpoints)
    Fal.ai AI model inference Prompts, images and videos, transient Global (region assigned by provider per request)
    Replicate AI model inference (fallback provider) Prompts, images and videos, transient Global (region assigned by provider per request)
    Magnific (Freepik) Image upscaling and enhancement Images, transient Available on request
    Clerk Authentication and user accounts Name, email, session data Available on request
    Cloudflare Edge network, security and bot protection Traffic metadata, IP address Global edge network
    Datadog Logging and alerting System logs EU
    Sentry Error monitoring Error logs Available on request
    PostHog Aggregated product analytics (excludes prompts and outputs) Usage data Available on request
    Stripe Subscription billing Billing contact details (Gendo stores no card data) Available on request

    Marketing and referrals

    Sub-processor Purpose Data processed Location
    Google Ads Advertising audience matching Hashed customer email addresses US
    Mailchimp Email communications Name, email, email engagement data US
    Cello Referral programme Name, email, referral activity Available on request

    Transfers outside the UK/EEA are covered by Standard Contractual Clauses and the UK IDTA. Last updated: 7 October 2026.

    Get notified of changes

    Subscribe to receive email notice of changes to this list.


    Security

    Our controls are aligned with SOC 2 standards, and we're working towards formal SOC 2 certification.

    Area Control
    Encryption at rest AES-256
    Encryption in transit TLS on all public endpoints, internal services and cache connections
    Network separation Web systems run in a private VPC; database access is restricted to a private VPN
    Production access Read-only, limited to named engineers; no access for non-technical staff
    Staff authentication Two-factor authentication on all critical systems
    Change management Every deployment requires approval from a second person
    Customer data separation Each organisation's data is logically separated, with authorisation checks on every request
    Monitoring Centralised logging and alerting
    AI-specific protection Prompts are sanitised and screened to defend against prompt injection
    Third-party access Zero tolerance for third parties accessing or licensing customer data

    Certifications

    Gendo does not yet hold SOC 2, ISO 27001 or Cyber Essentials certification. Our infrastructure, access controls and data handling follow equivalent practices, and SOC 2 certification is in progress. Our CTO, Will Jones, is happy to walk your security team through our setup.

    Book a security walkthrough

    Identity and access management

    Admins control who can see and edit every project, and Enterprise adds central identity management and audit trails.

    • Multi-factor authentication: Included free on all plans, using an authenticator app.
    • Role-based access: Viewer, Editor and Admin roles at organisation and project level, on every plan. Admins have full visibility of and control over their team.
    • Single sign-on (SAML): Available on Enterprise and as an add-on to Studio Scale. We set it up with your IT team during onboarding, typically in about a week.
    • User provisioning: Available on Enterprise.
    • Audit trails and usage analytics: Available as Enterprise add-ons.

    Data retention and deletion

    Your content stays in Gendo for as long as you have an active subscription, and you can delete it at any time.

    Data Retention
    Project content (prompts, uploads, outputs) For the life of your subscription, unless you delete it sooner
    Copies sent to AI providers and GPU jobs Deleted when processing is complete
    Account and usage data Only as long as needed for the purposes in our Privacy Policy

    How to delete

    1. Delete projects directly in the platform.
    2. Email [email protected] to request deletion of prompts, outputs and associated project materials.

    Your right to deletion on paid plans is set out in Terms of Service 9.4.

    On exit: You can download your outputs at any time. Enterprise customers can agree a fixed retention period, or automatic deletion at termination with written confirmation of erasure.


    Privacy and data protection

    Gendo processes very little personal data. Gendo Technology Ltd is the data controller for the account information it holds and is registered with the UK Information Commissioner's Office (ZB715125).

    • What we hold: Account details (name, email, organisation, role), IP address and usage data. Payments are handled by Stripe, and we never store card data.
    • Personal data in prompts: Gendo is built for architectural design content, so our terms ask customers not to include personal data in prompts. If your imagery may include identifiable people, tell us and we'll agree the right safeguards.
    • Your rights: Request access, correction, deletion, restriction or portability of your personal data at [email protected].
    • No selling: We never sell personal data or share it with third parties for marketing.
    • Law enforcement requests: If a public authority requests your data, we'll notify you promptly and share a copy of the request unless the law prohibits it.

    Data Processing Agreement

    Our standard Terms and Privacy Policy cover most customers' needs. Enterprise customers can enter into a Data Processing Agreement covering role allocation, security incident notification, audit rights, data subject requests and sub-processor change notifications.

    The DPA is available on Enterprise plans only. Studio and Studio Scale are covered by our standard Terms of Service and Privacy Policy.

    Gendo Data Processing Agreement

    Enterprise plans · Version 1.0 · 7 October 2026 · Fillable PDF

    Download PDF

    How to complete it

    1. Download the PDF and open it in Adobe Acrobat, Preview or any PDF reader that supports forms.
    2. Fill in your customer details, including your Enterprise order or account reference, and the Customer signature block after clause 7.
    3. Save the completed copy and email it to [email protected].
    4. Gendo will confirm your Enterprise plan, countersign and return the executed agreement to you.

    Not on Enterprise yet? Talk to our team about the right plan for your practice.


    Open source and licensing

    Gendo keeps a register of every open-source component it uses, and none of them places licence obligations on your outputs.

    • Published register: The full list of third-party licences is at gendo.ai/licenses.
    • Mostly permissive licences: Nearly all components use permissive licences such as MIT, Apache-2.0, BSD-3-Clause and ISC.
    • Copyleft stays server-side: Copyleft components run only on Gendo's servers and are never distributed to customers.
    • Your outputs are unaffected: Images, video and text generated in Gendo carry no open-source licence obligations and are owned by you.

    Enterprise FAQ


    Bringing Gendo to your practice?

    Our team will walk you through security, data handling and the right plan for your studio.

    Gendo Technology Ltd · Company no. 14526185 · Registered in England and Wales.