Is Otter.ai safe for work?
Low risk · 23Otter.ai, Inc. · Meetings & notetakers · facts (medium-confidence)
Otter.ai is low-risk for default at-work use (23/100): it trains on your data unless you opt out, and holds SOC 2 Type II.
23
Low risk
Watch out: Otter trains its own models on de-identified user content by default and its meeting assistant can auto-join calendar meetings, raising consent and surveillance concerns (it is the subject of a wiretap/consent class action).
Data and compliance facts
- Trains on consumer-tier data
- Opt-out
- Trains on business-tier data
- Opt-out
- Training opt-out available
- Yes
- SOC 2 Type II
- Yes
- ISO 27001
- Unverified
- ISO 42001 (AI management)
- Unverified
- GDPR Data Processing Addendum
- Yes
- HIPAA BAA
- Yes
- EU data residency
- Unverified
- SSO / SAML
- Yes
- Data retention
- Conversations stored on Otter's cloud (AWS S3, AES-256) until deleted; deleted items auto-purge from trash after 30 days; admins can set custom auto-deletion durations.
- Safer tier
- Enterprise
Why it scores 23 out of 100
- +17Trains on your data. Training is on by default on the consumer tier; you must find and set the opt-out.
- +6Trains on business-tier data. Whether even the paid or team tier uses your data for training.