---
title: "Otter.ai (Otter.ai, Inc.)"
url: "https://ailawframework.com/software/otter"
type: "software_profile"
site: "AI Law Framework"
id: "otter"
vendor: "Otter.ai, Inc."
category: "Legal-specific"
segment: "Transcription and meetings"
confidence: "medium"
last_reviewed: "2026-09-20"
---

# Otter.ai (Otter.ai, Inc.)

> Meeting transcription SaaS. Privacy policy allows training proprietary AI on de-identified audio and on transcripts unless an Enterprise agreement says otherwise. Recording consent is a legal precondition in Australia.

Canonical page: https://ailawframework.com/software/otter  
Last reviewed: 2026-09-20

Site index for agents: https://ailawframework.com/llms.txt

Plan covered: Otter Business/Enterprise meeting transcription and AI summaries. Consumer Pro is out of scope and has different privacy terms. Not a legal-research or DMS tool.

## Capabilities

- Transcription
- Document summarisation

## Key facts

| Fact | Value |
| --- | --- |
| Deployment | SaaS |
| Hosting regions | United States, Worldwide or dynamically routed |
| Australian region | No |
| Assurance | SOC 2 Type II |
| Training on customer content | Yes |
| Retention | Deleted conversations sit in Trash 30 days then are removed. Active conversation retention otherwise follows the account unless Enterprise settings say otherwise. |
| Integrations | Zoom, Google Meet, Microsoft Teams, Google Calendar |
| Pricing | Business/Enterprise sold on the site; a full public matrix was not captured in this review. |
| Australian presence | No. No AU office or AU data residency found. Recording-consent law is a firm obligation. |
| Website | https://otter.ai/ |

## What the research found

| Topic | Status | Finding | Open question | Sources |
| --- | --- | --- | --- | --- |
| Plan | Public claim only | Otter.ai meeting transcription and AI summaries. Business/Enterprise service agreements treat the organisation as controller. Consumer/Pro plans are different. Not a legal-research tool. | Confirm we would buy Business or Enterprise, not Pro, and whether AI Chat on transcripts is included. | [Otter Business](https://otter.ai/business); [Otter Privacy Policy](https://otter.ai/privacy-policy) |
| Deployment | Public claim only | SaaS. Audio stored on AWS S3. Global processing; privacy policy describes transfers outside the customer's country with SCCs for EEA/UK. | Where is audio stored and transcribed for an Australian workspace? | [Otter Privacy & Security page](https://otter.ai/privacy-security); [Otter Privacy Policy](https://otter.ai/privacy-policy) |
| Features | Public claim only | Live transcription, summaries, AI chat on meetings, calendar bots joining calls. Users must obtain consent to record. | Will the Otter bot be allowed in client meetings, and is consent captured? | [Otter Privacy & Security page](https://otter.ai/privacy-security); [Otter Business](https://otter.ai/business) |
| Australia | Not confirmed | Available in Australia as a SaaS product. Recording laws (state listening devices) and privilege are the firm's problem. No AU residency stated. | Is AU storage available, and how do we comply with surveillance-device statutes? | [Otter Privacy Policy](https://otter.ai/privacy-policy); [Otter Privacy & Security page](https://otter.ai/privacy-security) |
| Pricing | Not confirmed | Business page is marketing; list price not captured as a full matrix in this review. | Itemised Business vs Enterprise quote, including AI minutes and bots. | [Otter Business](https://otter.ai/business) |
| Calendar and meetings | Public claim only | Joins Zoom/Meet/Teams when invited. Not a DMS. Transcripts live in Otter unless exported. | Can transcripts be written to the matter file automatically, and who can share links? | [Otter Business](https://otter.ai/business); [Otter Privacy & Security page](https://otter.ai/privacy-security) |
| Support | Not confirmed | Not inspected. | Enterprise support SLA? | [Otter Business](https://otter.ai/business) |
| Quality | Not confirmed | No independent legal-transcript accuracy study in this review. Voice AI error rates matter for evidence. | Word-error rate on Australian-accent legal meetings? | [Otter Privacy & Security page](https://otter.ai/privacy-security) |
| Task fit | Not confirmed | Fit for internal meeting notes with consent. High risk for privileged client interviews, court, or without all-party consent. Not for affidavits. | Which meeting types are approved, and is the bot banned from client/counsel calls? | [Otter Privacy & Security page](https://otter.ai/privacy-security) |
| Recording and clients | Not confirmed | Otter requires users to obtain consent and indicate recording. A bot joining a client call without informed consent is a professional-conduct issue. | What consent language and bot-announcement settings will be enforced? | [Otter Privacy & Security page](https://otter.ai/privacy-security) |
| Model provider | Public claim only | Privacy policy lists 'artificial intelligence service providers' as recipients for improving/training proprietary AI. Named foundation-model vendors were not listed on the pages reviewed. | Name every AI subprocessor that receives audio or transcripts on our plan. | [Otter Privacy Policy](https://otter.ai/privacy-policy) |
| Subprocessors | Public claim only | Stripe (payments), AWS, Google Analytics, Amplitude, Facebook ads, data-labelling providers, cloud and AI providers. No complete dated legal subprocessor list with objection rights was found. | Provide a current subprocessor list with locations and notice rights for Enterprise. | [Otter Privacy Policy](https://otter.ai/privacy-policy) |
| Training | Public claim only | Privacy policy: Otter may train proprietary AI on de-identified audio recordings and on transcriptions (which may contain personal information), on the basis of consent or legitimate interests. Data-labelling providers create training data. For Business/Enterprise, Otter says it processes as processor on the customer's instructions — get a contractual no-training clause; do not rely on the consumer privacy policy. | Does our Enterprise DPA prohibit training on our audio and transcripts, including de-identified copies and labelling vendors? | [Otter Privacy Policy](https://otter.ai/privacy-policy) |
| Feedback | Not confirmed | Not separately described. | Is any in-app feedback used to train models? | [Otter Privacy Policy](https://otter.ai/privacy-policy) |
| Retention | Public claim only | Deleted conversations go to Trash and are auto-deleted after 30 days, or sooner if Trash is emptied. Live retention of active conversations is otherwise while the account exists unless configured. | What is Enterprise default retention for audio, transcripts and AI summaries? | [Otter Privacy & Security page](https://otter.ai/privacy-security) |
| Deletion | Public claim only | Trash 30 days. Enterprise processor terms should add certified deletion. Not seen in this review. | Certified deletion of audio, transcripts, embeddings and labelling copies within 30 days of instruction/exit? | [Otter Privacy & Security page](https://otter.ai/privacy-security); [Otter Privacy Policy](https://otter.ai/privacy-policy) |
| Human access | Public claim only | Recording/transcription described as without human interference at capture. Employees background-checked and under confidentiality. Labelling vendors receive data for training features — that is human review of content unless Enterprise excludes it. | Will any Otter employee or labelling vendor hear our Enterprise audio? | [Otter Privacy & Security page](https://otter.ai/privacy-security); [Otter Privacy Policy](https://otter.ai/privacy-policy) |
| Access | Public claim only | 2FA available on all plans. Sharing is user-controlled. SSO/SCIM for Enterprise was not verified on the pages scraped. | SSO, SCIM, and admin disable of sharing/bots on Enterprise? | [Otter Privacy & Security page](https://otter.ai/privacy-security); [Otter Business](https://otter.ai/business) |
| Encryption | Public claim only | AWS S3 SSE AES-256; keys rotated. TLS in transit not spelled out on the privacy-security page excerpt but typical for the product; confirm. | TLS version and encryption of transcripts at rest and in transit? | [Otter Privacy & Security page](https://otter.ai/privacy-security) |
| Assurance | Public claim only | SOC 2 Type 2 claimed; GDPR/CCPA/HIPAA/VPAT badges on the privacy-security page. Report not inspected. | Current SOC 2 Type II scoped to transcription storage and AI features. | [Otter Privacy & Security page](https://otter.ai/privacy-security) |
| Contract | Public claim only | Enterprise customers get a service agreement; Otter acts as processor. Consumer privacy policy still describes training. Execute a DPA that overrides training. | Provide Enterprise MSA/DPA with no-training, confidentiality of recordings, liability cap and forum. | [Otter Privacy Policy](https://otter.ai/privacy-policy); [Otter Business](https://otter.ai/business) |
| Transfers | Public claim only | Global operations; transfers outside the customer's country; SCCs for EEA/UK. No AU residency. AWS regions not named as AU on the security page. | APP 8 map for audio, transcripts, labelling vendors and AI providers. | [Otter Privacy Policy](https://otter.ai/privacy-policy); [Otter Privacy & Security page](https://otter.ai/privacy-security) |
| Incidents | Not confirmed | Not specified on the pages reviewed. | Breach notice timeline for recordings (NDB)? | [Otter Privacy Policy](https://otter.ai/privacy-policy) |
| Changes | Not confirmed | Privacy policy may change. Training purposes are already broad. | Notice before a new AI provider or training purpose? | [Otter Privacy Policy](https://otter.ai/privacy-policy) |
| Exit | Public claim only | User can delete conversations. Enterprise export format not inspected. | Bulk export of transcripts/audio then certified deletion? | [Otter Privacy & Security page](https://otter.ai/privacy-security) |
| Connectors | Public claim only | Calendar and meeting platforms. Sharing links are a disclosure path. | Disable public sharing links; list calendar integrations. | [Otter Privacy & Security page](https://otter.ai/privacy-security); [Otter Business](https://otter.ai/business) |
| Web search | Not confirmed | Not a research product. AI chat on a transcript might still generalise beyond the recording. | Does Otter Chat answer only from the transcript or also from general model knowledge? | [Otter Business](https://otter.ai/business) |
| Bots joining meetings | Not confirmed | Otter can join meetings when invited and record. That is an action with legal consequences. Admin controls over auto-join must be verified. | Can we disable auto-join and require a host confirm before any recording starts? | [Otter Privacy & Security page](https://otter.ai/privacy-security); [Otter Business](https://otter.ai/business) |
| Oversight | Not confirmed | Transcripts are AI output. Lawyers must check before relying. No court-ready certification. Privilege logs need a human. | Who in the firm reviews Otter output before it is saved to a matter? | [Otter Privacy & Security page](https://otter.ai/privacy-security) |

## Notes

Consumer privacy policy describes training on audio/transcripts. Enterprise processor terms must be read to see if that is disapplied. No AU residency. Consent-to-record is critical.

## Sources

- [Otter Privacy Policy](https://otter.ai/privacy-policy) (checked 2026-09-20)
- [Otter Privacy & Security page](https://otter.ai/privacy-security) (checked 2026-09-20)
- [Otter Business](https://otter.ai/business) (checked 2026-09-20)
- [Otter security (product)](https://otter.ai/security) (checked 2026-09-20)

A product profile is research to support questions. It does not approve a product for any firm. Public product information supports questions; it does not approve a product for your firm. Verify the exact plan, settings and signed terms.