Not legal advice · Summaries of vendors' public pages, which change often. Verify with the vendor and your contract before relying on anything here.
AI Terms Tracker
Get weekly changes

Does Otter.ai train on your data? (Business plans)

Otter.ai · Meeting notes · Last verified

Trains by default

Trains on business data unless you opt out.

Short answer: Yes, opt-out

Otter trains its proprietary models on de-identified recordings/transcripts automatically; Enterprise page offers an "AI model training opt-out" via your account manager. Third-party AI providers do not train on customer data.

Source: otter.ai/privacy-security

Why this matters: "De-identified" removes names, not the substance of what was said or written. What "de-identified" covers →

2/7 assurances found·5 of 9 fields confirmed from vendor pages

Below: retention, SOC 2, ISO 27001/42001, DPA, BAA, data residency and zero-retention for Otter.ai, each linked to Otter.ai's own page.

Summary of Otter.ai's public pages as of Oct 17, 2026. Not legal advice: terms vary by plan and contract and can change. Confirm with Otter.ai before relying on it.

Trains on your data by default

Yes, opt-out

Otter trains its proprietary models on de-identified recordings/transcripts automatically; Enterprise page offers an "AI model training opt-out" via your account manager. Third-party AI providers do not train on customer data.

Source:

Data retention

Until deleted; trash purged after 30 days

Deleted conversations go to trash and are automatically deleted after 30 days.

Source:

SOC 2 Type II

Yes

SOC 2 Type 2.

Source:

ISO/IEC 27001

No

Policies are "based on the ISO 27001/2 framework"; no certification claimed.

Source:

ISO/IEC 42001

Unknown

Not stated on the Otter.ai pages we checked.

Pages checked:

DPA available

Unknown

Not stated on the Otter.ai pages we checked.

Pages checked:

BAA / HIPAA

Yes

HIPAA compliance only on the Enterprise plan; BAA via account manager.

Source:

Data residency options

Unknown

Not stated on the Otter.ai pages we checked.

Pages checked:

Zero-retention option

Unknown

Says AI service providers do not store customer data sent through the API; no customer-facing ZDR option stated.

Source:

Vendor pages we monitor for this tool

We save a fingerprint (SHA-256 of the page's visible text) on every check so we can spot when a vendor edits its terms.

PageCheckedFingerprint
https://otter.ai/privacy-policyOct 17, 2026c4e3f08c8d2c…
https://otter.ai/privacy-securityOct 17, 2026c497adc2e44b…
https://otter.ai/enterpriseOct 17, 202680ebdb07b9e4…
https://help.otter.ai/hc/en-us/articles/33975072019991-HIPAA-Otter-aiOct 17, 202608d707cd785f…

Compare with

See all Meeting notes tools · Why AI training on your data matters · How we source and verify this