Is Otter.ai safe: what Otter's own privacy and security page says, point by point
By Ryleigh Newman · Published
Otter is a cloud service, so asking whether it is safe is really several questions: how it stores recordings, who can open them, whether it trains on them, and what happens when you delete. Otter answers each on its Privacy and Security page. This page lays those answers out without softening them, including the one about training its models.
I built YapToText, a dictation app for the Mac, not a meeting recorder, so read what I say about Otter with that in mind. Every fact about Otter here comes from its own help center and website, read on October 11, 2026.
This app is completely free. You don't have to make an account. There are no subscriptions, no difficult downloads, and nothing is locked. Made for Apple silicon Macs. Source on GitHub.
The answers at a glance
From Otter's Privacy and Security page and help center, read October 11, 2026.
| Question | What Otter says |
|---|---|
| Where is data stored | AWS, in the United States West region, in S3 storage |
| Is it encrypted | Server-side encryption with AES-256, with a root key that is rotated regularly |
| Audits | A SOC 2 Type 2 report, maintained with an independent auditor |
| Does it train on my recordings | Yes, after de-identifying them. See the next section |
| Who can see my conversations | You and the people you share with. Otter staff need your explicit consent |
| Does it sell data or show ads | It says it does not sell personal information and serves no third-party ads |
| Two-factor authentication | Available on every plan |
| Deleted conversations | 30 days in Trash, then deleted |
Training on your recordings
This is the point most people are asking about, so here is Otter's wording in substance. Otter says it uses a proprietary method to de-identify user data before training its models, so that an individual user cannot be identified. It says the training is automatic, that recordings and transcripts are not manually reviewed by a human, and that the training data is encrypted.
- Its AI service providers. Otter says no customer data is used to train or improve those providers' models, and that they do not store customer data sent through the API.
- Imported documents. Otter says imported customer data, such as documents from Google Workspace, is not used to train its models.
- Human review. Otter says it requires explicit consent before its staff or third parties review a recording manually.
Government and legal requests
Otter says it will not turn over information about a customer without a legal process compelling it to, that it does not voluntarily give agencies access for surveillance, and that unless restricted by law it intends to tell users promptly about requests for their data. It says it will not voluntarily comply with a request from a non-U.S. government unless a U.S. court compels it.
The part that is on you
Otter's page says users must comply with local laws and must always ask for consent and say when they are recording and transcribing other people. A notetaker that joins meetings automatically makes that easy to forget. The page on stopping Otter joining meetings shows how to make it join only meetings you choose. Otter also lists HIPAA, GDPR and CCPA on its page. If you work under one of those, read its exact wording and your own obligations before relying on a summary like this one.
What a cloud service cannot be
Nothing above is unusual for a cloud product, and the audit and encryption are real protections. What no cloud service can offer is recordings that never leave your computer. If that is your requirement, the tool has to run locally. YapToText does: it transcribes on the Mac, has no account, and sends no audio or text anywhere. It is a dictation app and a file transcriber, not a meeting assistant, so it answers a different need. The Otter alternative page is honest about which jobs it covers, and deleting an Otter recording covers removal.
This app is completely free. You don't have to make an account. There are no subscriptions, no difficult downloads, and nothing is locked. Made for Apple silicon Macs. Source on GitHub.
The short version
- Storage. AWS in the United States, AES-256.
- Audit. SOC 2 Type 2.
- Training. Yes, on de-identified data, automatically.
- People. Staff need your consent to review a recording.
- Deleting. 30 days in Trash, then gone.
- Consent. Telling others they are recorded is your job.
If Otter changes these policies, open an issue on GitHub and I will update this page. Every one gets read.
This app is completely free. You don't have to make an account. There are no subscriptions, no difficult downloads, and nothing is locked. Made for Apple silicon Macs. Source on GitHub.
Related
Sources
- https://otter.ai/privacy-security (checked 2026-10-11)
- https://help.otter.ai/hc/en-us/articles/360048258953-Data-security-and-privacy-policies (checked 2026-10-11)
- https://help.otter.ai/hc/en-us/articles/360047733414-Delete-a-conversation (checked 2026-10-11)
- https://github.com/ryleighnewman/YapToText (checked 2026-10-11)
- https://apps.apple.com/us/app/yaptotext/id6786382289 (checked 2026-10-11)
Questions
Is Otter.ai safe to use?
Otter reports a SOC 2 Type 2 audit, AES-256 encryption on AWS and two-factor authentication. It is a cloud service, so your recordings are stored on its servers.
Does Otter.ai use my recordings to train AI?
Otter says it de-identifies user data before training its models, automatically and without human review. It says its outside AI providers do not train on customer data.
Can Otter employees listen to my recordings?
Otter says it requires your explicit consent before staff or third parties review a recording or transcript.
Does Otter.ai sell my data?
Otter says it does not sell personal information and does not serve third-party ads in its products.
Where does Otter store data?
On AWS in the United States West region, in S3 storage with AES-256 server-side encryption.