AI Vendor Directory · Meeting transcription & notetakers
Does Otter.ai train on your data?
Depends — varies by plan or setting. Vendor-stated default: yes on Business and lower tiers (de-identified); no by default on Enterprise. Otter's privacy policy confirms it improves the service by "training our proprietary AI technology on de-identified audio recordings and on transcriptions (which may contain Personal Information)." Otter says training is automatic (no human review) and uses "a proprietary method to de-identify user data"; imported files are excluded, and third-party AI providers do not train on customer data. No self-serve training opt-out is documented for Business plans. Enterprise is different: "By default, Enterprise workspaces are opted out of AI model training" — enforced via the Enterprise agreement; changing it requires the Otter account manager.
By the Shieldra Compliance Team · Last updated 2026-07-29
What is Otter.ai (Business)?
AI meeting notetaker that joins Zoom/Meet/Teams calls to record, transcribe and summarize. SMBs typically use it for automatic meeting notes and action items.
Key facts
- Vendor: Otter.ai — https://otter.ai
- Trains on customer data by default: yes on Business and lower tiers (de-identified); no by default on Enterprise
- Source for the training answer: https://help.otter.ai/hc/en-us/articles/13352505516695-Enterprise-Admin-Controls-Overview
- Last verified: 2026-07-29
What certifications does Otter.ai hold?
- SOC 2 Type II
- HIPAA (vendor-claimed compliance)
Security, DPA, and subprocessor links
- Security / trust page: https://otter.ai/privacy-security
What is your EU AI Act role when you build on Otter.ai?
Your organization is a deployer under the EU AI Act; Otter is the provider. Notify meeting participants that an AI notetaker is recording/processing, and treat the Business-tier training default as the primary vendor-risk flag — Enterprise is the tier that turns it off.
What to record in your AI registry
- Provider: Otter.ai
- Model type: third party api
- Data typically flowing to the vendor: meeting audio recordings, transcripts (may contain personal data/PHI), meeting summaries
Sources
- https://otter.ai/privacy-security
- https://help.otter.ai/hc/en-us/articles/13352505516695-Enterprise-Admin-Controls-Overview
- https://otter.ai/privacy-policy
Disclaimer
Curated from vendor-published pages on the date above. Vendor terms change - verify against the cited sources before relying on a profile for a procurement decision. Last verified 2026-07-29.
Frequently asked questions
Does Otter.ai train AI models on your data?
Depends — varies by plan or setting. Vendor-stated default: yes on Business and lower tiers (de-identified); no by default on Enterprise. Otter's privacy policy confirms it improves the service by "training our proprietary AI technology on de-identified audio recordings and on transcriptions (which may contain Personal Information)." Otter says training is automatic (no human review) and uses "a proprietary method to de-identify user data"; imported files are excluded, and third-party AI providers do not train on customer data. No self-serve training opt-out is documented for Business plans. Enterprise is different: "By default, Enterprise workspaces are opted out of AI model training" — enforced via the Enterprise agreement; changing it requires the Otter account manager.
What certifications does Otter.ai hold?
Per the vendor's published pages as of 2026-07-29: SOC 2 Type II; HIPAA (vendor-claimed compliance).
What is your EU AI Act role when you build on Otter.ai?
Your organization is a deployer under the EU AI Act; Otter is the provider. Notify meeting participants that an AI notetaker is recording/processing, and treat the Business-tier training default as the primary vendor-risk flag — Enterprise is the tier that turns it off.
