--- title: "Fireflies.ai (Fireflies.ai)" url: "https://ailawframework.com/software/fireflies" type: "software_profile" site: "AI Law Framework" id: "fireflies" vendor: "Fireflies.ai" category: "Legal-specific" segment: "Transcription and meetings" confidence: "medium" last_reviewed: "2026-09-20" --- # Fireflies.ai (Fireflies.ai) > Meeting transcription bot. Security page claims no training, SOC 2 Type II, HIPAA, AES-256 and Enterprise private storage. 'Don't train by default' and 'never used for training' both appear — get a signed clause. Canonical page: https://ailawframework.com/software/fireflies Last reviewed: 2026-09-20 Site index for agents: https://ailawframework.com/llms.txt Plan covered: Fireflies Enterprise meeting notetaker with private storage and claimed 0-day vendor retention. Free/pro consumer plans are out of scope. ## Capabilities - Transcription - Document summarisation ## Key facts | Fact | Value | | --- | --- | | Deployment | SaaS | | Hosting regions | Unknown | | Australian region | On request | | Assurance | SOC 2 Type II, HIPAA | | Training on customer content | No | | Retention | Enterprise: 0-day retention policy with vendors/partners claimed so meeting data is not used for model training. Customer copies persist until deleted in-app. | | Integrations | Zoom, Google Meet, Microsoft Teams | | Pricing | Public pricing not captured in this scrape; Enterprise private storage is a higher tier. | | Australian presence | Unknown. Private storage location is an Enterprise option; AU not named. | | Website | https://fireflies.ai/ | ## What the research found | Topic | Status | Finding | Open question | Sources | | --- | --- | --- | --- | --- | | Plan | Public claim only | Fireflies.ai meeting notetaker. Enterprise features include private storage, SSO, 0-day retention with vendors. Consumer/free plans differ. | Confirm Enterprise with private storage and 0-day vendor retention. | [Fireflies.ai Security](https://fireflies.ai/security) | | Deployment | Public claim only | SaaS; Enterprise private storage at a preferred location (claim). Default region not stated as AU. | Where will our transcripts live? | [Fireflies.ai Security](https://fireflies.ai/security) | | Features | Public claim only | Bot joins meetings, transcribes, summarises, AI chat on meetings. | Auto-join on or off? Consent capture? | [Fireflies.ai Security](https://fireflies.ai/security) | | Australia | Not confirmed | Recording-consent law applies. No AU residency claim found on the security page besides 'preferred location' for Enterprise. | AU storage and surveillance-device compliance? | [Fireflies.ai Security](https://fireflies.ai/security) | | Pricing | Not confirmed | Public pricing exists historically; not captured in this scrape. | Itemised Enterprise quote. | [Fireflies.ai Security](https://fireflies.ai/security) | | Meetings | Public claim only | Zoom/Meet/Teams style bots. SSO on Enterprise. | SSO/SCIM and transcript export to the matter file? | [Fireflies.ai Security](https://fireflies.ai/security) | | Support | Not confirmed | Not specified. | Support SLA? | [Fireflies.ai Security](https://fireflies.ai/security) | | Quality | Not confirmed | No legal-transcript accuracy study here. | Error rate on Australian-accent legal calls? | [Fireflies.ai Security](https://fireflies.ai/security) | | Task fit | Not confirmed | Internal meetings with consent only. High risk for privileged client calls. | Banned meeting types? | [Fireflies.ai Security](https://fireflies.ai/security) | | Consent | Not confirmed | A bot joining a client call without informed consent is a conduct issue. | Mandatory announcement and consent settings? | [Fireflies.ai Security](https://fireflies.ai/security) | | Model provider | Not confirmed | Not named on the security page. 0-day retention with vendors claimed. | Name every transcription/LLM vendor. | [Fireflies.ai Security](https://fireflies.ai/security) | | Subprocessors | Not confirmed | Not listed on the security page extract. | Published list with notice rights. | [Fireflies.ai Security](https://fireflies.ai/security); [Fireflies.ai Privacy](https://fireflies.ai/privacy) | | Training | Public claim only | Security page: we don't train on it by default; later 'never used for AI training'; 0-day retention so data is never used for training. Reconcile 'by default' versus 'never' in the contract. | Signed clause: no training by Fireflies or subprocessors, no exceptions. | [Fireflies.ai Security](https://fireflies.ai/security) | | Feedback | Not confirmed | Not specified. | Feedback used to train? | [Fireflies.ai Security](https://fireflies.ai/security) | | Retention | Public claim only | 0-day retention with vendors/partners claimed. Customer-side transcript retention is the workspace setting. | Customer retention period and vendor 0-day evidence. | [Fireflies.ai Security](https://fireflies.ai/security) | | Deletion | Not confirmed | Not fully specified. | Delete audio, transcripts, vectors on instruction? | [Fireflies.ai Security](https://fireflies.ai/security) | | Vendor access | Not confirmed | Not specified. | Staff access to recordings? | [Fireflies.ai Security](https://fireflies.ai/security) | | SSO | Public claim only | SSO listed under Enterprise. 2FA not separately highlighted in the extract. | SSO-only and sharing controls? | [Fireflies.ai Security](https://fireflies.ai/security) | | Encryption | Public claim only | AES-256 at rest, TLS in transit. | TLS version and key management? | [Fireflies.ai Security](https://fireflies.ai/security) | | Assurance | Public claim only | SOC 2 Type II, GDPR, HIPAA claimed. Reports not inspected. | Current SOC 2 report. | [Fireflies.ai Security](https://fireflies.ai/security) | | Contract | Not confirmed | Not inspected. | DPA, cap, forum? | [Fireflies.ai Security](https://fireflies.ai/security); [Fireflies.ai Privacy](https://fireflies.ai/privacy) | | Transfers | Public claim only | Private storage location is an Enterprise option. Default likely US. | APP 8 map. | [Fireflies.ai Security](https://fireflies.ai/security) | | Incidents | Not confirmed | Not specified. | Breach notice timeline? | [Fireflies.ai Security](https://fireflies.ai/security) | | Changes | Not confirmed | Not specified. | Notice before a new transcription vendor? | [Fireflies.ai Security](https://fireflies.ai/security) | | Exit | Not confirmed | Not specified. | Export then certified deletion? | [Fireflies.ai Security](https://fireflies.ai/security) | | Connectors | Public claim only | Meeting platforms and CRM-style integrations typical; list not fully extracted. | Enabled integrations list. | [Fireflies.ai Security](https://fireflies.ai/security) | | Web search | Not confirmed | Meeting product. Confirm AI chat does not browse the web. | Is meeting AI closed-corpus? | [Fireflies.ai Security](https://fireflies.ai/security) | | Auto-join bot | Not confirmed | Bot join is the high-impact action. | Disable auto-join; require host confirm. | [Fireflies.ai Security](https://fireflies.ai/security) | | Oversight | Not confirmed | Transcripts need lawyer review before the file. | Who reviews before matter save? | [Fireflies.ai Security](https://fireflies.ai/security) | ## Notes Training language is inconsistent (by default vs never). Model providers unnamed. Consent-to-record is the main legal risk. ## Sources - [Fireflies.ai Security](https://fireflies.ai/security) (checked 2026-09-20) - [Fireflies.ai Privacy](https://fireflies.ai/privacy) (checked 2026-09-20) A product profile is research to support questions. It does not approve a product for any firm. Public product information supports questions; it does not approve a product for your firm. Verify the exact plan, settings and signed terms.