Meetings & transcription

Otter.ai

Provider: Otter.ai, Inc. · Based in: Delaware corporation, registered address 800 W El Camino Real, Suite 170, Mount… · Provider website

Plans
4
Sources
9
As of
18 Oct

As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.

Incomplete. 1 point could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.

At a glance

Hosting
US only: all 4 plans
Training on inputs
yes: Basic, Pronot publicly documented: Businessno: Enterprise
DPA
yes: all 4 plans
Provider
Otter.ai, Inc.
Based in
Delaware corporation, registered address 800 W El Camino Real, Suite 170, Mountain View, CA 94040, USA (privacy policy)

Values from 4 plans, each listed with the plans it applies to. Details and evidence are in the plan table.

Compared plan by plan with other tools in the category Meetings & transcription:

Details per plan

Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.

Compare with another tool

Price and scope

differs by plan
Free
yes

Contract and data use

yes
differs by plan
yes
differs by plan
Deleted conversations go to the trash and…

Hosting and sharing

US only
list available

Evidence

differs by plan
7 sources

not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.

Third-country transfers

Privacy policy (effective 2026-06-16): according to its own statement, Otter.ai is certified under the EU-US DPF, the UK Extension and the Swiss-US DPF; in addition, Standard Contractual Clauses for transfers outside the EEA/UK. Terms of Service Appendix 1 (DPA) defines the SCCs pursuant to Decision (EU) 2021/914 and a UK Addendum.

Sources:

Certifications (as stated by the provider)

Privacy & Security: 'SOC 2 Type 2' report; security policies 'based on the ISO 27001/2 framework' (no ISO 27001 certification claimed; wording: 'continuously reviewing various cybersecurity frameworks'); VPAT, HIPAA (add-on). ISO 42001: not publicly documented. A separate Trust Center is not linked on the Otter pages; otter.ai/trust returns only the general app shell (the path is treated as a public profile name), not a Trust Center document.

Sources:

AI Act

Functions: Live and post-hoc transcription, speaker recognition incl. voiceprints ('Speaker Identification / Biometric Information' in the privacy policy), AI summaries, AI Chat, workflows, notetaker bot, SDR/recruiting agent (pricing/navigation page).

Provider’s statement: not publicly documented(no mention of the EU AI Act found in the privacy policy, Terms or Privacy & Security page). The provider obliges users to obtain consent for recordings: 'users are required to comply with local laws ... must always ask for consent'. Trust Center pages (otter.ai/trust, /trust-center, /security) returned no text on retrieval (JS).

Classification (for review, not legal advice): For review: customer typically a deployer (Art. 3(4)). Speaker/voice recognition (voiceprints) and any emotion/sentiment analysis in workplace settings are to be reviewed against Art. 5 and Annex III. Not legal advice.

Sources:

Current notes 2026

Privacy policy effective 2026-06-16; sub-processor list effective 2026-03-31 (names Anthropic and OpenAI as AI service providers); Terms of Service effective 2025-09-19. Use of de-identified audio/transcript data for training is stated as a purpose in the privacy policy; opt-out not documented on the retrieved pages; according to the Help Center, Enterprise workspaces are excluded from training by default.

Open points of the review

  • Training use for Basic/Pro/Business: the Help Center describes the setting 'Help improve Otter' (sharing conversations for training and product improvement, q9); whether it also covers the training on de-identified data described in the privacy policy, and which state applies when nothing has been chosen, is not documented.

Frequently asked questions

Where does Otter.ai store data?

US only (plans: Basic (Free), Pro, Business, Enterprise). According to the provider, as of 18 Oct 2026.

Is there a DPA for Otter.ai?

yes in: Basic (Free), Pro, Business, Enterprise. According to the provider, as of 18 Oct 2026.

Does Otter.ai use inputs for AI training?

yes in: Basic (Free), Pro; not publicly documented in: Business; no in: Enterprise. Based on our research, as of 18 Oct 2026.

Where is the provider based?

Delaware corporation, registered address 800 W El Camino Real, Suite 170, Mountain View, CA 94040, USA (privacy policy). According to the provider, as of 18 Oct 2026.

All sources

  1. 01Privacy Policy (effective 2026-06-16)Privacy notice · retrieved 18 Oct 2026
  2. 02Terms of Service incl. DPA (effective 2025-09-19)Terms and conditions · retrieved 14 Oct 2026
  3. 03Privacy & SecurityTrust Center · retrieved 18 Oct 2026
  4. 04PricingPricing page · retrieved 18 Oct 2026
  5. 05Subprocessors (effective 2026-03-31)Sub-processor list · retrieved 14 Oct 2026
  6. 06Enterprise Admin Controls Overview (Help Center, updated 2026-07-17)Documentation · retrieved 14 Oct 2026
  7. 07Set a custom Data Retention policy (Help Center, updated 2026-10-16)Documentation · retrieved 18 Oct 2026
  8. 08Otter AI Chat FAQs (Help Center, updated 2026-10-18)Documentation · retrieved 18 Oct 2026
  9. 09Provide feedback to Otter (Help Center, updated 2026-09-16)Documentation · retrieved 19 Oct 2026

More tools in Meetings & transcription with an EU hosting option (in at least one plan)

All tools in Meetings & transcription · Tools with an EU hosting option

Further reading

All tools in the category: Meetings & transcription. Figures across all tools: Data report.