Otter.ai: which plan do I need for patient data?
Short answer
Plans with a BAA: Enterprise (+ HIPAA add-on).
No BAA: Basic / Pro / Business.
Only a plan with a signed BAA should be used with PHI. Staff on other plans, including personal accounts, shouldn't enter patient data.
| Plan | BAA? | How you get the BAA | Trains on your data? | Retention | Fine print |
|---|---|---|---|---|---|
| Basic / Pro / Business | Nono[source] | n/a | Yesyes (de-identified)[source] | Unverified | n/a |
| Enterprise (+ HIPAA add-on) | Yesyes (via account manager)[source] | Nono (via account manager)[source] | Yesyes (de-identified)[source] | Custom retention policy set by admin[source] | HIPAA is a paid Enterprise add-on, and Otter says it trains its own models on de-identified audio/transcripts.[source] |
Full detail and certifications: Otter.ai. Checked 2026-10-16.
Not legal advice. From the vendor's own pages on the date shown. Confirm the current terms with the vendor.