---
title: "Enterprise Documentation: Security, Data and IP | Gendo"
url: https://gendo.ai/enterprise-documentation
description: "Gendo for Enterprise: IP ownership, no training on your work, UK data storage, sub-processors, security controls, retention and our Data Processing Agreement."
lang: en
---

Enterprise documentation

# Gendo for Enterprise

Last updated: 7 October 2026

AI visualisation built for practices that work under NDA. You own every output, your work never trains our models, and your data stays under your control.

Talk to our team: https://gendo.ai/book-call
Enterprise DPA (PDF): https://gendo.ai/legal/gendo-data-processing-agreement.pdf

## Contents

## Overview

Gendo is used by architecture and design practices to explore, iterate and present design ideas. Enterprise teams bring confidential client work into Gendo, so we've built the platform around four commitments.

01

### You own what you make

On every paid plan, all intellectual property in your outputs belongs to you, and your prompts and source material stay yours.

02

### Your work never trains our models

Prompts, uploads and outputs on paid plans are never used as training data, and our AI providers are contractually barred from training on them.

03

### Your data stays protected

Project content is stored in the UK, encrypted at rest and in transit, and logically separated from every other customer.

04

### You stay in control

Delete projects at any time, manage your team with role-based access, and add SSO and audit logs as you scale.

* * *

## Plans at a glance

Every paid plan carries the same core protections: you own your outputs, nothing is used for training, and MFA and role-based access come as standard. Enterprise adds identity, governance and customisation for larger practices.

| Capability | Studio | Studio Scale | Enterprise |
| --- | --- | --- | --- |
| Full IP ownership of outputs | ✓ | ✓ | ✓ |
| No training on your prompts or outputs | ✓ | ✓ | ✓ |
| Commercial licence | ✓ | ✓ | ✓ |
| Unlimited rendering | ✓ | ✓ | ✓ |
| Seats included | 5 | 5 | From 20 |
| Multi-factor authentication | ✓ | ✓ | ✓ |
| Roles (Viewer, Editor, Admin) at organisation and project level | ✓ | ✓ | ✓ |
| SSO (SAML) | — | Add-on | Available |
| Audit trails and usage analytics | — | — | Add-on |
| Custom models | — | — | ✓ |
| Custom Catalogue: your studio's shared materials library | — | ✓ | ✓ |
| Dedicated onboarding and priority support | — | — | ✓ |
| Data Processing Agreement and custom terms | Standard terms | Standard terms | Available |
| Billing | Monthly or annual | Monthly or annual | Annual commitment |

SSO setup is done with your IT team during onboarding and typically takes about a week. Enterprise pricing is tailored — talk to our team (https://gendo.ai/book-call).

* * *

## Ownership and intellectual property

On every paid plan you own all intellectual property in your outputs, and your prompts remain yours.

| Item | Who owns it | Where it's set out |
| --- | --- | --- |
| Prompts (briefs, sketches, models, photos, uploads) | You and your licensors | Terms of Service 9.2 |
| Outputs (images, video, text) | You. Gendo assigns all its rights in outputs to you | Terms of Service 9.1 |
| The Gendo platform, models and documentation | Gendo | Terms of Service 9.8 |

- **Confidentiality:** On paid plans, your prompts and outputs are your Confidential Information, and Gendo is bound to keep them confidential.
- **How we use your content:** Gendo holds a limited licence to store your prompts and outputs in the platform, run the service, and comply with the law. We don't use them for marketing, training or any other purpose.
- **Client deliverables:** Because you own the outputs, you can use them commercially, including in client presentations and contract deliverables.
- **Indemnity:** Gendo indemnifies you against claims that your use of the platform itself infringes a third party's patent, copyright or trade mark. Enterprise customers can discuss additional indemnity terms covering outputs.
* * *

## AI training

On Studio, Studio Scale and Enterprise, your content is never used to train AI models — by Gendo or by any model provider your content passes through.

- **Our commitment:** On paid plans, prompts, uploaded content, project information and generated outputs are never used as training data.
- **Third-party model providers:** We engage AI providers under commercial agreements that prohibit training on, or any independent use of, customer data. Data sent to a provider is used only to complete that request and is deleted shortly afterwards.
- **Usage analytics:** The usage metrics we collect to run and improve the service exclude prompts and outputs.
- **Free plans:** Different terms apply on Free and Educational plans, where content may be used to improve Gendo's models. This is the main reason professional teams choose a paid plan.
* * *

## Where your data is hosted and processed

Project content is stored at rest in the United Kingdom, and most processing runs on Gendo's own infrastructure in the UK and EU.

| Activity | Location |
| --- | --- |
| Project content at rest (prompts, uploads, outputs) | United Kingdom |
| Application processing | Gendo's own servers in the EU |
| Image generation on Gendo's own GPU infrastructure | Primarily UK and EU, with some US capacity |
| Generation through third-party model providers | May take place outside the UK/EU, including the US. Transient only. |

- **International transfers:** Where data leaves the UK or EEA, we rely on the EU Standard Contractual Clauses and the UK International Data Transfer Agreement or UK Addendum. Copies are available on request from privacy@gendo.ai.
- **UK/EEA-only processing:** Enterprise customers who need processing kept within the UK or EEA can discuss this with us.
* * *

## Sub-processors

We use the third-party providers below to deliver and grow the service. Each one receives only the data needed for its task.

| Sub-processor | Purpose | Data processed | Location |
| --- | --- | --- | --- |
| Amazon Web Services (AWS) | Cloud hosting, storage and content delivery | Project content (including images and videos), account data, cached copies of images and videos | UK, EU; cached copies on global edge network |
| RunPod | GPU compute for Gendo's own image generation | Prompts and images, deleted when each job completes | UK, EU, Canada, India, some US |
| OpenAI | AI model provider | Prompts and images, transient | US |
| Google | AI model provider | Prompts and images, transient | Global (Google global endpoints) |
| Fal.ai | AI model inference | Prompts, images and videos, transient | Global (region assigned by provider per request) |
| Replicate | AI model inference (fallback provider) | Prompts, images and videos, transient | Global (region assigned by provider per request) |
| Magnific (Freepik) | Image upscaling and enhancement | Images, transient | Available on request |
| Clerk | Authentication and user accounts | Name, email, session data | Available on request |
| Cloudflare | Edge network, security and bot protection | Traffic metadata, IP address | Global edge network |
| Datadog | Logging and alerting | System logs | EU |
| Sentry | Error monitoring | Error logs | Available on request |
| PostHog | Aggregated product analytics (excludes prompts and outputs) | Usage data | Available on request |
| Stripe | Subscription billing | Billing contact details (Gendo stores no card data) | Available on request |

### Marketing and referrals

| Sub-processor | Purpose | Data processed | Location |
| --- | --- | --- | --- |
| Google Ads | Advertising audience matching | Hashed customer email addresses | US |
| Mailchimp | Email communications | Name, email, email engagement data | US |
| Cello | Referral programme | Name, email, referral activity | Available on request |

Transfers outside the UK/EEA are covered by Standard Contractual Clauses and the UK IDTA. Last updated: 7 October 2026.

Get notified of changes

Subscribe to receive email notice of changes to this list.

* * *

## Security

Our controls are aligned with SOC 2 standards, and we're working towards formal SOC 2 certification.

| Area | Control |
| --- | --- |
| Encryption at rest | AES-256 |
| Encryption in transit | TLS on all public endpoints, internal services and cache connections |
| Network separation | Web systems run in a private VPC; database access is restricted to a private VPN |
| Production access | Read-only, limited to named engineers; no access for non-technical staff |
| Staff authentication | Two-factor authentication on all critical systems |
| Change management | Every deployment requires approval from a second person |
| Customer data separation | Each organisation's data is logically separated, with authorisation checks on every request |
| Monitoring | Centralised logging and alerting |
| AI-specific protection | Prompts are sanitised and screened to defend against prompt injection |
| Third-party access | Zero tolerance for third parties accessing or licensing customer data |

Certifications

Gendo does not yet hold SOC 2, ISO 27001 or Cyber Essentials certification. Our infrastructure, access controls and data handling follow equivalent practices, and SOC 2 certification is in progress. Our CTO, Will Jones, is happy to walk your security team through our setup.

Book a security walkthrough (https://gendo.ai/book-call)

* * *

## Identity and access management

Admins control who can see and edit every project, and Enterprise adds central identity management and audit trails.

- **Multi-factor authentication:** Included free on all plans, using an authenticator app.
- **Role-based access:** Viewer, Editor and Admin roles at organisation and project level, on every plan. Admins have full visibility of and control over their team.
- **Single sign-on (SAML):** Available on Enterprise and as an add-on to Studio Scale. We set it up with your IT team during onboarding, typically in about a week.
- **User provisioning:** Available on Enterprise.
- **Audit trails and usage analytics:** Available as Enterprise add-ons.
* * *

## Data retention and deletion

Your content stays in Gendo for as long as you have an active subscription, and you can delete it at any time.

| Data | Retention |
| --- | --- |
| Project content (prompts, uploads, outputs) | For the life of your subscription, unless you delete it sooner |
| Copies sent to AI providers and GPU jobs | Deleted when processing is complete |
| Account and usage data | Only as long as needed for the purposes in our Privacy Policy |

### How to delete

1. Delete projects directly in the platform.
2. Email privacy@gendo.ai to request deletion of prompts, outputs and associated project materials.

Your right to deletion on paid plans is set out in Terms of Service (https://gendo.ai/terms-of-service) 9.4.

**On exit:** You can download your outputs at any time. Enterprise customers can agree a fixed retention period, or automatic deletion at termination with written confirmation of erasure.

* * *

## Privacy and data protection

Gendo processes very little personal data. Gendo Technology Ltd is the data controller for the account information it holds and is registered with the UK Information Commissioner's Office (ZB715125).

- **What we hold:** Account details (name, email, organisation, role), IP address and usage data. Payments are handled by Stripe, and we never store card data.
- **Personal data in prompts:** Gendo is built for architectural design content, so our terms ask customers not to include personal data in prompts. If your imagery may include identifiable people, tell us and we'll agree the right safeguards.
- **Your rights:** Request access, correction, deletion, restriction or portability of your personal data at privacy@gendo.ai.
- **No selling:** We never sell personal data or share it with third parties for marketing.
- **Law enforcement requests:** If a public authority requests your data, we'll notify you promptly and share a copy of the request unless the law prohibits it.
* * *

## Data Processing Agreement

Our standard Terms and Privacy Policy cover most customers' needs. Enterprise customers can enter into a Data Processing Agreement covering role allocation, security incident notification, audit rights, data subject requests and sub-processor change notifications.

**The DPA is available on Enterprise plans only.** Studio and Studio Scale are covered by our standard Terms of Service and Privacy Policy.

Gendo Data Processing Agreement

Enterprise plans · Version 1.0 · 7 October 2026 · Fillable PDF

Download PDF (https://gendo.ai/legal/gendo-data-processing-agreement.pdf)

### How to complete it

1. Download the PDF and open it in Adobe Acrobat, Preview or any PDF reader that supports forms.
2. Fill in your customer details, including your Enterprise order or account reference, and the Customer signature block after clause 7.
3. Save the completed copy and email it to privacy@gendo.ai.
4. Gendo will confirm your Enterprise plan, countersign and return the executed agreement to you.

Not on Enterprise yet? Talk to our team (https://gendo.ai/book-call) about the right plan for your practice.

* * *

## Open source and licensing

Gendo keeps a register of every open-source component it uses, and none of them places licence obligations on your outputs.

- **Published register:** The full list of third-party licences is at https://gendo.ai/licenses.
- **Mostly permissive licences:** Nearly all components use permissive licences such as MIT, Apache-2.0, BSD-3-Clause and ISC.
- **Copyleft stays server-side:** Copyleft components run only on Gendo's servers and are never distributed to customers.
- **Your outputs are unaffected:** Images, video and text generated in Gendo carry no open-source licence obligations and are owned by you.
* * *

## Enterprise FAQ

### Do you train AI models on our data?

### Who owns what we create?

### Where is our data stored?

### Can we delete our data?

### Are you SOC 2 or ISO 27001 certified?

### Do you support SSO and MFA?

### Is there an audit log?

### Can we sign a DPA?

### Is our data isolated from other customers?

### Do you keep copies of our work with third parties?

### Can we export our data?

### Does Gendo generate code?

* * *

## Bringing Gendo to your practice?

Our team will walk you through security, data handling and the right plan for your studio.

Talk to our team: https://gendo.ai/book-call
Email privacy@gendo.ai: privacy@gendo.ai

Gendo Technology Ltd · Company no. 14526185 · Registered in England and Wales.

Gendo

A living canvas for visual exploration, iteration, and decision-making.

### Product

- Product: https://gendo.ai/product
- Why Gendo: https://gendo.ai/why-gendo
- Pricing: https://gendo.ai/pricing
- FAQs: https://gendo.ai/faqs

### Company

- About Us: https://gendo.ai/about-us
- Career: https://gendo.ai/career
- Environmental Statement: https://gendo.ai/about/environmental-statement
- Blog: https://gendo.ai/resources/insights
- Contact Us: https://gendo.ai/book-call

### Connect

- LinkedIn: https://linkedin.com/company/gendo-ai
- Instagram: https://instagram.com/gendo.ai
- YouTube: https://youtube.com/@Gendo-ai

© 2026 Gendo. All rights reserved.

Licenses: https://gendo.ai/licenses
Terms of Service: https://gendo.ai/terms-of-service
Privacy Policy: https://gendo.ai/privacy-policy

## Structured data

```json
{
  "@context": "https://schema.org",
  "@type": "FAQPage",
  "mainEntity": [
    {
      "@type": "Question",
      "name": "Do you train AI models on our data?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "No. On paid plans, prompts, uploads and outputs are never used for training, by Gendo or by our model providers."
      }
    },
    {
      "@type": "Question",
      "name": "Who owns what we create?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "You do. All IP in outputs is assigned to you, and your prompts remain yours."
      }
    },
    {
      "@type": "Question",
      "name": "Where is our data stored?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Project content is stored at rest in the UK. Processing runs mainly in the UK and EU, with some transient processing by US model providers under SCCs and the UK IDTA."
      }
    },
    {
      "@type": "Question",
      "name": "Can we delete our data?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Yes, at any time: in the platform, or by emailing privacy@gendo.ai."
      }
    },
    {
      "@type": "Question",
      "name": "Are you SOC 2 or ISO 27001 certified?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Not yet. Our controls are aligned with SOC 2, and certification is in progress."
      }
    },
    {
      "@type": "Question",
      "name": "Do you support SSO and MFA?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "MFA is free on every plan. SAML SSO is available on Enterprise and as a Studio Scale add-on."
      }
    },
    {
      "@type": "Question",
      "name": "Is there an audit log?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Yes, as an Enterprise add-on."
      }
    },
    {
      "@type": "Question",
      "name": "Can we sign a DPA?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Yes, as part of an Enterprise agreement."
      }
    },
    {
      "@type": "Question",
      "name": "Is our data isolated from other customers?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Yes. Each organisation's data is logically separated, with authorisation on every request. Dedicated environments can be discussed under Enterprise."
      }
    },
    {
      "@type": "Question",
      "name": "Do you keep copies of our work with third parties?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "No. Copies sent to model providers are used only to complete each request and are deleted once processing completes."
      }
    },
    {
      "@type": "Question",
      "name": "Can we export our data?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Yes. You can download your outputs at any time, including before you leave."
      }
    },
    {
      "@type": "Question",
      "name": "Does Gendo generate code?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "No. Gendo generates images, video and text for architectural visualisation."
      }
    }
  ]
}
```