Otter starts recording only when you or a meeting participant presses Record or invites Otter to your meeting. When this happens, Otter’s AI technology enables it to record and transcribe automatically without any human interference.
Privacy & Security
At Otter.ai ("Otter"), we believe that voice collaboration is more effective and more efficient when you can retain it, recall it and share it. We recognize your conversations may contain some of your most sensitive and confidential information. That’s why we are committed to keeping your information private and secure. Additionally, we believe transparency is important to all meeting participants. As such users are required to comply with local laws and regulations and must always ask for consent and indicate when they are recording and transcribing conversations with others.
We follow best practices for privacy and security that align with global regulatory requirements
SOC 2 TYPE 2
Otter utilizes best practices to protect our customers’ data and works with independent experts to verify its security measures, and has achieved SOC 2 Type 2 report against stringent standards. We work with an independent auditor to maintain a SOC 2 report, which objectively certifies our controls to ensure the continuous security of our customers' data.
GDPR
General Data Protection Regulation (GDPR) is Europe’s regulation for data protection and privacy. We have incorporated GDPR standards into data practices to make sure our customers have confidence in our security.
CCPA
California Consumer Privacy Act (CCPA) is a statute intended to enhance privacy rights and consumer protection for residents of California, United States. We do not sell your data. We have incorporated CCPA standards into our data practices.
VPAT
Otter recognizes the importance of Section 508 of the Rehabilitation Act and for IT accessibility. Otter has completed a Voluntary Product Accessibility Template (VPAT) to document compliance with accessibility requirements as outlined in Section 508.
Privacy
You control your conversations (transcription and recordings).
Your conversations are always private, accessible to only you and the people you choose to share with. To change the permissions for any conversation, please reference these directions.
When you delete a conversation, it is moved to the Trash. Otter automatically deletes conversations from the trash after 30 days. If you manually clear conversation(s) from the trash bin, Otter deletes the conversation(s) at that time. Please see these directions for additional details.
Security
Otter doesn’t just talk about security. We’ve taken comprehensive actions to secure your conversations and data.
Two-factor authentication: Available for all Otter plans. For an added layer of security, turn on two-factor authentication for your account. If your password is compromised or stolen, you'll have peace of mind knowing that two-factor authentication keeps others out of your account, even if they have your password. Please see these directions for additional details.
Data Storage: Otter uses AWS S3 storage and enables AWS SSE (Server Side Encryption) on data (S3 buckets), as well as for machine data volumes. It encrypts the key itself with a root key that it regularly rotates. Server-side encryption uses a 256-bit Advanced Encryption Standard (AES-256).
Otter Employees: All employees go through a thorough background check, and sign a confidentiality agreement.
Otter Computers: We secure our employees' computers using mobile device management (MDM) (e.g. hard drive encryption enabled and anti-malware software installed).
