Skip to main content

Vendor Privacy Scorecard · Otter.ai

Otter.ai: is it safe for client information?

Meeting transcription and summaries that can join calls automatically.

Use with care

Bottom line

Use with care. The notetaker can join meetings automatically and record people who did not agree. Lock down auto-join and get consent first.

Does it train on your data? By plan

  • Basic and Pro: User or admin setting

    Otter uses de-identified audio and text to train its models under its privacy policy.

  • Business and Enterprise: User or admin setting

    Adds admin controls. Confirm training terms in your contract.

What an auditor will ask

Trains AI on your data? Depends on plan
Otter states it trains on de-identified data. Confirm the terms for your plan in writing.
Retention you can control? Depends on plan
Enterprise admins can set retention. Other plans keep recordings until deleted.
Signs a HIPAA BAA? Depends on plan
Otter offers HIPAA support on Enterprise. Confirm a signed BAA before any patient meetings.
Staff may read your content? Depends on plan
Staff may review content with permission or for support.

Security certifications

  • SOC 2 Type II

Set it up the safe way

  1. Turn off automatic meeting join for every account.
  2. Tell every attendee and get consent before recording, especially in two-party consent states.
  3. Keep it out of client and patient meetings unless your Enterprise BAA covers it.
  4. Set a deletion schedule for recordings.

Otter.ai trust centerBusiness privacy terms

Summarized from Otter.ai's published terms, last checked 10/1/2026. Vendors change terms. Confirm every point against the agreement you actually signed. This is not legal advice.

See every vendor scorecard

Using Otter.ai at work? An unvetted tool can cost you your license.

When an employee pastes client information or confidential files into Otter.ai without the correct safeguards, licensing boards and regulatory bodies hold you responsible. AI Governance Rule Watch™ documents your approved tool roster, vendor reviews, and staff guidelines in permanent diligence records ready for any audit.

Founding member rate. Cancel anytime. Plus applicable taxes. Renews until canceled. Not legal advice and not a compliance certification.