Otter starts recording only when you or a meeting participant presses Record or invites Otter Assistant to your meeting. When this happens, Otter’s AI technology enables it to record and transcribe automatically without any human interference.
Privacy & Security
At Otter.ai, we believe that voice collaboration is more effective and more efficient when you can retain it, recall it and share it. We recognize your conversations may contain some of your most sensitive and confidential information. That’s why we are committed to keeping your information private and secure. Additionally, we believe transparency is important to all meeting participants. As such users are required to comply with local laws and regulations and must always ask for consent and indicate when they are recording and transcribing conversations with others.
We follow best practices for privacy and security that align with global regulatory requirements
SOC 2 TYPE 2
Otter utilizes best practices to protect our customers’ data and works with independent experts to verify its security measures, and has achieved SOC 2 Type 2 report against stringent standards. We work with an independent auditor to maintain a SOC 2 report, which objectively certifies our controls to ensure the continuous security of our customers' data.
GDPR
General Data Protection Regulation (GDPR) is Europe’s regulation for data protection and privacy.
We have incorporated GDPR standards into data practices to make sure our customers have confidence in our security.
We have incorporated GDPR standards into data practices to make sure our customers have confidence in our security.
CCPA
California Consumer Privacy Act (CCPA) is a statute intended to enhance privacy rights and consumer protection for residents of California, United States. We do not sell your data and are compliant with CCPA.
VPAT
Otter recognizes the importance of Section 508 of the Rehabilitation Act and meets revised 508 Standards for IT accessibility. Otter is VPAT (Voluntary Product Accessibility Template) certified.
Privacy
You control your conversations (transcription and recordings).
Your conversations are always private, accessible to only you and the people you choose to share with. To change the permissions for any conversation, please reference these directions.
When you delete a conversation, it is moved to the Trash. If you manually clear a conversation from the trash, Otter permanently purges the conversation at that time. Otter automatically clears conversations from the trash after 30 days, and permanently purges these conversations 7 days after they are cleared from the trash. Please see these directions for additional details.
Security
Otter.ai doesn’t just talk about security. We’ve taken comprehensive actions to secure your conversations and data.
Two-factor authentication: Available for all Otter plans. For an added layer of security, turn on two-factor authentication for your account. If your password is compromised or stolen, you'll have peace of mind knowing that two-factor authentication keeps others out of your account, even if they have your password. Please see these directions for additional details.
Data Storage: Otter uses AWS S3 storage and enables AWS SSE (Server Side Encryption) on data (S3 buckets), as well as for EC2 EBS data volumes. It encrypts the key itself with a root key that it regularly rotates. Amazon S3 and EBS server-side encryption uses a 256-bit Advanced Encryption Standard (AES-256).
Otter Employees: All employees go through a thorough background check, and sign a confidentiality agreement.
Otter Computers: We secure our employees' computers using mobile device management (MDM) (e.g. hard drive encryption enabled and anti-malware software installed).
