As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.

Incomplete. 3 points could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.

At a glance

Hosting
US only: Free, Pro, Businessmixed: Enterprise
Training on inputs
no: all 4 plans
DPA
yes: all 4 plans
Provider
Fireflies.ai Corp.
Based in
USA; Terms of Service: Delaware law, place of jurisdiction New Castle County, Delaware; address for notices, arbitration demands and general correspondence (Sections 20(b), 20(e), 25(b)) and DMCA agent: 2802 Vizzolini Court, Pleasanton, CA 94566 USA. The About Us page gives the contact address 'Fireflies.ai Corp 1000 Brickell Ave, Ste 715 PMB 5136 Miami, FL 33131'. None of the pages expressly describes an address as the registered office/headquarters; privacy policy: 'Fireflies.ai is based in the United States'.

Values from 4 plans, each listed with the plans it applies to. Details and evidence are in the plan table.

Compare Fireflies.ai

Compare with another tool

Compared plan by plan with other tools in the category Meetings & transcription:

Details per plan

Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.

Compare with another tool

Price and scope

differs by plan
0 USD
yes

Contract and data use

yes
no
differs by plan
Privacy policy: storage 'for as long as…

Hosting and sharing

differs by plan
US only
list available

Evidence

10 sources

not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.

Third-country transfers

DPA (as of 2026-03-06) Section 7: Fireflies.ai is self-certified under the Data Privacy Framework (processing in the USA); if the DPF basis ceases to apply, the EU SCCs (Module Two or Three) apply, for UK data together with the UK IDTA, for Swiss data with FADP adjustments. Privacy policy (as of 2026-09-28) confirms participation in the EU-US/Swiss-US DPF and the UK Extension.

Sources:

Certifications (as stated by the provider)

Trust Center (Compliance): SOC 2 (Type 2 report 2025/2026 on request), ISO/IEC 42001:2023 (certificate under Resources), GDPR, HIPAA (BAA for Enterprise customers with Private Storage), FERPA (DSA for Enterprise with Private Storage). Security page: 'SOC 2 Type II', 'HIPAA Compliant'. ISO 27001: not mentioned.

Sources:

AI Act

Functions: Transcription, AI summaries, AskFred (AI assistant), Conversation Intelligence, Voice Agents, Personal/Email Assistant, AI Skills, real-time notes (pricing page, navigation).

Provider’s statement: not publicly documented(no mention of the EU AI Act found in the Terms, privacy policy, DPA or security page).

Classification (for review, not legal advice): For review: customer typically a deployer (Art. 3(4)). Meeting recording and Conversation Intelligence (speaker/sentiment analysis) in a work context are to be reviewed against Art. 5(1)(f) (emotion recognition in the workplace) and Annex III. Not legal advice.

Sources:

Current notes 2026

Terms of Service and privacy policy last updated 2026-09-28, DPA 2026-03-06. Trust Center lists ISO/IEC 42001:2023. Private Storage (Enterprise) allows storage at the chosen location; according to the Trust Center, processing remains in the USA.

Open points of the review

  • Company headquarters: the Terms give Pleasanton (CA) as the correspondence address, the About Us page an address in Miami (FL); no page expressly describes an address as the registered office.
  • Private Storage: EU storage is documented; a complete list of the regions offered is not published.
  • The Security page states 'We don't train on it by default'; Terms 5(c) and the Trust Center FAQ rule out training without restriction. Whether a different setting exists is not documented.

Frequently asked questions

Where does Fireflies.ai store data?

US only (plans: Free, Pro, Business); mixed (plans: Enterprise). According to the provider, as of 18 Oct 2026.

Is there a DPA for Fireflies.ai?

yes in: Free, Pro, Business, Enterprise. According to the provider, as of 18 Oct 2026.

Does Fireflies.ai use inputs for AI training?

no in: Free, Pro, Business, Enterprise. According to the provider, as of 18 Oct 2026.

Where is the provider based?

USA; Terms of Service: Delaware law, place of jurisdiction New Castle County, Delaware; address for notices, arbitration demands and general correspondence (Sections 20(b), 20(e), 25(b)) and DMCA agent: 2802 Vizzolini Court, Pleasanton, CA 94566 USA. The About Us page gives the contact address 'Fireflies.ai Corp 1000 Brickell Ave, Ste 715 PMB 5136 Miami, FL 33131'. None of the pages expressly describes an address as the registered office/headquarters; privacy policy: 'Fireflies.ai is based in the United States'. According to the provider, as of 18 Oct 2026.

All sources

  1. 01Terms of Service (as of 2026-09-28)Terms and conditions · retrieved 18 Oct 2026
  2. 02Privacy Policy (as of 2026-09-28)Privacy notice · retrieved 18 Oct 2026
  3. 03Data Processing Addendum (as of 2026-03-06)DPA · retrieved 18 Oct 2026
  4. 04PricingPricing page · retrieved 18 Oct 2026
  5. 05SecurityTrust Center · retrieved 18 Oct 2026
  6. 06Fireflies Trust Center (Overview, FAQ)Trust Center · retrieved 18 Oct 2026
  7. 07Fireflies Trust Center – SubprocessorsSub-processor list · retrieved 14 Oct 2026
  8. 08Understanding Fireflies Billing: Terms, Plans & AI CreditsHelp centre · retrieved 18 Oct 2026
  9. 09Fireflies Trust Center – FAQTrust Center · retrieved 18 Oct 2026
  10. 10About Us (contact address)Legal notice · retrieved 18 Oct 2026

More tools in Meetings & transcription with an EU hosting option (in at least one plan)

All tools in Meetings & transcription · Tools with an EU hosting option

Further reading

All tools in the category: Meetings & transcription. Figures across all tools: Data report.