Is Otter AI safe? A plain look at Otter AI privacy

This guide sticks to what Otter's own pages say and what is on the public record, so you can decide for yourself. We make a competing product, Hark, and we say so up front. Everything below about Otter is linked to its source; we checked those pages in October 2026.

How Otter handles your data

Otter is a cloud service. When it records a meeting, whether through its notetaker bot, its desktop app or its phone app, the audio goes to Otter's servers, where it's transcribed, summarized and stored. That's what makes features like search, sharing and AI chat across your conversations possible. Here's what Otter's privacy policy (effective June 16, 2026) says about the parts most people care about.

What it collects

• Audio recordings and the transcripts made from them.
• Automatic screenshots of virtual meetings, taken by its notetaker.
• Speaker identification information, used to tag names in transcripts.
• Account details, device and usage data, approximate location from your IP address.
• Calendar and contact information from apps you connect, such as Google Calendar or Zoom.

AI training

The policy says Otter trains its AI on "de-identified audio recordings and on transcriptions (which may contain Personal Information)." It lists data labeling providers among the vendors that receive data to create training and evaluation data. The policy doesn't explain how de-identification works or describe a dedicated opt-out switch for training, beyond your general right to withdraw consent. If this matters to you, check your account and workspace settings and ask Otter in writing what applies to your plan.

Where it's stored and who sees it

• Data is stored with US-based cloud providers, including Amazon Web Services. For EU, UK and Swiss users, Otter relies on the Data Privacy Framework and standard contractual clauses.
• Vendors that receive data include cloud hosts, AI service providers, data labeling services, and analytics providers such as Google and Amplitude.
• The policy says some sharing of device, cookie and location data with advertising and analytics partners may count as a "sale" under some US state laws, and offers a "Do Not Sell or Share My Personal Information" link to opt out.
• Data is kept "for as long as necessary" for the purposes in the policy; it doesn't give fixed retention periods.

Security certifications

Otter's trust center lists SOC 2, HIPAA, GDPR, CCPA, VPAT and TX-RAMP Level 2, with a SOC 2 report available. Certifications show that an auditor checked Otter's security controls. They don't change what the privacy policy allows Otter to do with your data.

The Otter privacy lawsuit

On August 15, 2025, Justin Brewer filed a proposed class action against Otter.ai in the US District Court for the Northern District of California (case 5:25-cv-06911). According to coverage of the complaint, Brewer was not an Otter user and says he was recorded in a Zoom meeting by Otter's notetaker. The suit claims Otter recorded participants without everyone's consent and used the conversations to train its models.

The case was combined with similar suits as In re Otter.AI Privacy Litigation. As law firm ZwillGen summarizes, the plaintiffs also object to voiceprints made to identify speakers and argue that Otter's policy improperly puts the duty to get consent on its customers. In 2026, the court allowed several core claims (under the federal Wiretap Act, California's Invasion of Privacy Act and Illinois' biometric privacy law) to go forward, as Baird Holm reported.

Important context: these are allegations. Nothing has been proven, and Otter disputes the claims; it has argued it provides a service at the direction of the account holder or meeting host. The case was still pending when we checked in October 2026.

How to use Otter more safely

1. Check auto-join. If your calendar is connected, decide which meetings the notetaker joins instead of letting it join all of them.
2. Check auto-share. Review who receives notes and transcripts after a meeting.
3. Tell people. Announce that you're recording at the start, and stop if anyone objects.
4. Look for data settings. Review the data and privacy controls in your account, and use the "Do Not Sell or Share" link if you want.
5. Delete what you don't need. Old recordings you no longer use are still stored until you delete them.
6. Ask your employer. Many companies have rules about which AI note takers are approved for client or confidential calls.

Questions to ask any AI note taker

Otter isn't unusual: most AI note takers are cloud services with similar policies. Before you trust any of them with sensitive calls, get clear answers to these:

1. Where is the audio transcribed? On my device, or on your servers or a third party's?
2. Do you keep the audio? For how long, and can I delete it permanently?
3. Do you train AI on my meetings? Is it on by default, and is there a clear opt-out?
4. Which other companies see my data? Transcription providers, AI model providers, analytics, advertisers?
5. How do other people in the meeting find out? Is there a bot, a notice, or nothing at all?
6. Do you make voiceprints? Some places treat voiceprints as biometric data with special rules.
7. Can you sign the agreements I need? For example a data processing agreement, or a HIPAA business associate agreement for health information.

How local note takers like Hark differ

A local note taker does the heavy lifting on your own computer. Hark, for example:

• Records on your computer, with no bot. It captures your microphone and your computer's audio, so nothing joins the call. That also means it's on you to tell people you're recording.
• Transcribes on your computer. Speech recognition (an NVIDIA Parakeet model) runs locally. Audio is not uploaded for transcription. We explain how this works in our local AI transcription guide.
• Keeps recordings, transcripts and voiceprints on your computer unless you turn on sync, which encrypts them on your computer before upload.
• Doesn't train AI on your meetings.

To be equally clear about the limits: Hark's AI features (meeting notes, titles, proofreading, live notes) send the transcript text, not the audio, to Claude by Anthropic through External Software's service. If you only use the free features, nothing is sent anywhere. Hark has no SOC 2, HIPAA or other certifications. It transcribes English only, and on a Mac it records the microphone only. Local tools also put backups and device security in your hands.

If you want to keep the convenience of a cloud tool, read our Otter vs Fireflies comparison. If you'd rather avoid bots and the cloud, see our list of Otter alternatives or the guide to an AI note taker without a bot.