← Meeting & call note-takers compared
Otter.ai
Otter.ai · Meeting note-taker · MedicalDentalTherapy
Verdict: Safe on specific plans only
BAA only on: Enterprise (+ HIPAA add-on).
BAA fine print (Enterprise (+ HIPAA add-on)): HIPAA is a paid Enterprise add-on, and Otter says it trains its own models on de-identified audio/transcripts. Source: https://otter.ai/privacy-security, checked 2026-10-16
Practice fit: General-purpose tool (editorial category).
Not legal advice. Summarized from the vendor's own pages. Confirm with the vendor before entering PHI.
Basic / Pro / Business
| Question | Answer | Source & date checked |
|---|---|---|
| BAA available? | Nono'HIPAA compliance is only available for the Enterprise plan.' | https://help.otter.ai/hc/en-us/articles/33975072019991-HIPAA-Otter-ai checked 2026-10-16 |
| BAA self-serve? | n/a | Follows from the BAA answer |
| BAA fine print | n/a | Follows from the BAA answer |
| Trains on your data by default? | Yesyes (de-identified)Otter de-identifies audio/transcripts, then trains its own models. | https://otter.ai/privacy-security checked 2026-10-16 |
| Retention | Unverifiedunverified | No first-party source found · checked 2026-10-16 |
| SOC 2 | Yesyes (Type 2) | https://otter.ai/privacy-security checked 2026-10-16 |
| ISO 42001 | Unverifiedunverified | No first-party source found · checked 2026-10-16 |
| HITRUST | Unverifiedunverified | No first-party source found · checked 2026-10-16 |
| Starting price (as published) | StatedBasic free; Pro $16.99/user/mo (monthly) | https://otter.ai/pricing checked 2026-10-16 |
Enterprise (+ HIPAA add-on)
| Question | Answer | Source & date checked |
|---|---|---|
| BAA available? | Yesyes (via account manager)HIPAA is a paid add-on. | https://help.otter.ai/hc/en-us/articles/33975072019991-HIPAA-Otter-ai checked 2026-10-16 |
| BAA self-serve? | Nono (via account manager) | https://help.otter.ai/hc/en-us/articles/33975072019991-HIPAA-Otter-ai checked 2026-10-16 |
| BAA fine print | StatedHIPAA is a paid Enterprise add-on, and Otter says it trains its own models on de-identified audio/transcripts. | https://otter.ai/privacy-security checked 2026-10-16 |
| Trains on your data by default? | Yesyes (de-identified)Same training statement; Enterprise-specific opt-out not confirmed. | https://otter.ai/privacy-security checked 2026-10-16 |
| Retention | StatedCustom retention policy set by admin | https://help.otter.ai/hc/en-us/articles/33975072019991-HIPAA-Otter-ai checked 2026-10-16 |
| SOC 2 | Yesyes (Type 2) | https://otter.ai/privacy-security checked 2026-10-16 |
| ISO 42001 | Unverifiedunverified | No first-party source found · checked 2026-10-16 |
| HITRUST | Unverifiedunverified | No first-party source found · checked 2026-10-16 |
| Starting price (as published) | UnverifiedunverifiedNo published price found on pages we fetched. | No first-party source found · checked 2026-10-16 |