Which AI meeting notetakers state HIPAA support or offer a BAA?
Of the 8 AI meeting notetakers we track, 5 state HIPAA support or a BAA on their own pages (Fathom, Fireflies.ai, Otter.ai, Read AI and Zoom AI Companion), 1 offers it on some plans only (Granola), and 2 don't say (tl;dv and Webex AI Assistant). A BAA usually requires a specific plan and a signed agreement, so check the vendor's terms below.
Last verified · Methodology · Not legal advice
| Tool | BAA / HIPAA | Plan and conditions | Trains by default | Data retention | Checked | Vendor source |
|---|---|---|---|---|---|---|
| Fathom Fathom | Yes, stated by vendor | States HIPAA compliance. | Trains unless you opt out | Until deleted; backups purged 7 days after account deletion | help.fathom.video | |
| Fireflies.ai Fireflies.ai | Yes, stated by vendor | HIPAA BAA is offered on the Enterprise plan with Private Storage, not on every plan. | Doesn't train by default | Custom retention (Enterprise) | fireflies.ai | |
| Otter.ai Otter.ai | Yes, stated by vendor | HIPAA compliance only on the Enterprise plan; BAA via account manager. | Trains unless you opt out | Until deleted; trash purged after 30 days | help.otter.ai | |
| Read AI Read AI | Yes, stated by vendor | BAA available (Enterprise+ only). | Doesn't train by default | Free: text up to 2 years, recordings 180 days; paid: until deleted (Enterprise+ custom) | support.read.ai | |
| Zoom AI Companion Zoom | Yes, stated by vendor | Meeting Summary is available to customers with an active BAA. | Doesn't train by default | Varies by feature | support.zoom.com | |
| Granola Granola | Some plans only | Not on Free or Business plans; desktop apps only. | Depends on plan or setting | Indefinite unless deleted or auto-deletion is set | docs.granola.ai | |
| tl;dv tldx Solutions GmbH | Not stated by vendor | Not stated on any vendor page we checked. | Doesn't train by default | Recordings: 3 months (free), until account deletion (paid) | None found | |
| Webex AI Assistant Cisco | Not stated by vendor | – | Doesn't train by default | Follows Webex content retention | webex.com |
Before you rely on this
HIPAA support stated on a vendor page is not the same as a signed BAA. Most vendors require a specific plan (often Enterprise) and a separately signed agreement, and some limit which features are covered. "Not stated by vendor" means we couldn't find a statement on the vendor's public pages, not that the vendor refuses. See also AI tools that don't train on your data and the methodology.