Otter.ai Buyer's Checklist: Safety, HIPAA, Privacy and Billing

Otter.ai is safe enough for most business meetings if you configure it before you connect a calendar, and it is not a HIPAA tool unless you buy Enterprise. Otter says it holds SOC 2 Type II, encrypts content with AES-256 and TLS, and stores data on AWS in the United States. HIPAA coverage exists only as an Enterprise add-on with a signed Business Associate Agreement.^[1] Basic, Pro and Business are not for patient data. The bigger risks are practical. The Notetaker joins meetings by default, recording consent is legally your job, and paid plans are non-refundable. Each check below is something you can verify before paying.

Consent and the Notetaker that joins on its own

Otter Notetaker (formerly OtterPilot) auto-joins every calendar event that carries a Zoom, Google Meet or Microsoft Teams link once you connect a Google or Microsoft calendar. It enters as a visible guest named after you, posts a chat message linking to the live transcript, and can auto-share notes with guests, who get a summary email within two hours. It cannot join hidden. Otter's Terms leave you solely responsible for notice and consent, and Otter says its settings are safeguards, not legal compliance. The bot-free desktop app is the sharper edge: it records from your device and shows other participants nothing.

• Set the default auto-join to Meetings I manually select, and make later changes at least 30 minutes before a meeting.
• Set auto-share to nobody or to same-domain guests; per-event settings can override the account default.
• Decide how you announce desktop-app recordings, since nobody else sees them.
• Confirm your Teams tenant admits anonymous guests and your Zoom hosts allow recording to local files.
• On a team workspace, have an admin lock the auto-join default. Only Enterprise blocks auto-join by meeting-title keywords.

One wrinkle remains. Under deduplication, a teammate's Notetaker with broader sharing can become the recorder, so a meeting may reach the workspace even if the host chose not to share. Notetakers from other companies' Otter workspaces can still join your external calls, one per workspace. Anyone in the meeting can remove them by typing stop otter in the chat; our removal guide covers every route.

What Otter does with your recordings

Otter's privacy policy lists training its own AI on de-identified audio recordings and on transcriptions that may contain personal information. Its security page says de-identification is automatic, so nobody reviews that material by hand. Otter's privacy pages name no opt-out from training on de-identified data. Enterprise workspaces are the exception: they are opted out of model training by default. Third-party AI providers, including Anthropic and OpenAI, are listed as neither training on nor storing customer data through the API.

A separate switch matters more for most buyers. The Help improve Otter setting, under Account Settings and then Meetings, decides whether Otter and third-party providers may access your conversations for training, including human review.^[2] Choosing not to share also removes access to past conversations. Staff otherwise reach your audio only with explicit consent. Watch the quiet forms of it. Sending diagnostics from the mobile app counts. So does rating a transcript with the permission box ticked.

• Set Help improve Otter to not share, on every account, before the first recording.
• Know that a Workspace owns its data, including conversations from before a user joined, and admins can access and remove it.
• Need data kept outside the US? Otter does not publish a choice of data region.
• Plan deletion yourself: Otter publishes no fixed retention period, and deleted conversations sit in Trash for 30 days.
• Otter's policy lists voiceprints as biometric data; only Enterprise can turn speaker learning off.

HIPAA, BAAs and the paperwork gates

Otter announced HIPAA compliance in July 2025, but the coverage is narrow. It is an Enterprise add-on, and Otter is not a business associate by default. You need a signed BAA, started through your account manager or Sales, and Otter publishes no price for the add-on. The customer still carries duties: assess how PHI enters Otter, disable public and link sharing, and manage the auto-joining Notetaker so it never lands in a clinical session uninvited. Never record patient details on Basic, Pro or Business. Our healthcare guide covers the PHI controls.

For a security questionnaire, the rest of the file is short. Otter says it holds SOC 2 Type II. Its policies are based on the ISO 27001/2 framework, but Otter claims no ISO certification. It offers a VPAT for Section 508, participates in the EU-U.S. Data Privacy Framework, and attaches a GDPR data processing agreement and a US State DPA to its Terms. Two-factor authentication by app works on every plan; SMS codes start on Business, for US and Canadian numbers only.

• Get the BAA signed before the first recording that could hold PHI; buying Enterprise alone does not create one.
• If your vendor review demands an ISO 27001 certificate, flag it now.

Admin controls and the 100-user line

Control scales with plan. Basic allows a workspace of up to 5 members, Pro caps at 5 billed users, and Business at 25 billed users. Business adds workspace usage analytics with CSV export, admin activity logs and bulk export. What a security team usually asks for sits on Enterprise: SAML SSO, SCIM directory sync, domain capture, user groups, custom data retention, audio removal, export controls and a switch that disables AI features. SSO and SCIM require a minimum 100-user license,^[3] so a 40-person team that needs SSO must license at least 100 users. There is no SAML single logout.

Two Enterprise items carry conditions. Custom retention can be as short as 24 hours, but activating it immediately deletes every older conversation, and that data skips Trash. Teams recording permission capture needs a Microsoft Enterprise licence, is switched on by Otter's account manager, and works in Outlook web and desktop, not mobile. AI Chat is on by default for all accounts, and only an admin can opt the whole workspace out, through a form.

• Count users who need SSO; below 100, budget for the minimum license or accept manual provisioning.
• Owners and admins count as paid licenses; Otter has no billing-only role.

Caps against your real meeting week

On Basic and Pro, minutes form one shared pool per user across meetings, in-app recordings, imports and integrations such as Zapier. They do not roll over, extra minutes are not for sale, and deleted conversations still count. The pool resets on your billing-cycle date. Pro's 1,200 minutes equal 20 hours a month, about 4.6 hours a week, by our arithmetic: twenty one-hour meetings or thirteen 90-minute ones. On Basic, a meeting past 30 minutes keeps recording, but only the first 30 minutes stay viewable until you upgrade.

Integrations follow the same ladder. Slack, the Chrome extension and the Otter MCP server work on every plan. Zapier starts on Pro. Synced notes to Salesforce or HubSpot cover 1 user on Pro, 5 on Business and unlimited users on Enterprise; Salesforce also needs Sales Cloud Enterprise, Unlimited or Developer Edition, with no Sandbox. Dropbox auto-sync and Zoom Live Notes start on Business, and Live Notes needs a paid Zoom plan. The Public API and webhooks are Enterprise only.

• Log one typical week of recorded minutes per person, including imported files.
• Count meetings over 90 minutes; each one pushes you past Pro.
• Match every integration you need to its plan.

Billing traps to clear before you pay

Pro costs $16.99 per user a month billed monthly, or $8.33 per user a month billed annually ($99.96 a year by our arithmetic). Business costs $19.99 per user a month billed annually ($239.88 a year by our arithmetic), or $30 per user a month billed monthly; first-time subscribers on monthly billing pay $24 a month for the first three months. Enterprise goes through sales with no published price. Annual Pro beats monthly if you keep it six months or more, and annual Business wins from eight months at list price. Our pricing guide has the team math.

The Business free trial lasts 7 days and needs a card. At the end it charges the monthly Business rate for every seat unless an admin cancels first. Otter advertises no Pro trial. Workspace trial members are a quieter trap: people who join through discovery or a sharing invite convert to paid licenses at trial end, and switching to annual billing converts them immediately. A person gets a Workspace trial only once.

Under Otter's Terms, subscriptions are non-refundable; Otter documents narrow exceptions elsewhere: a Domain Capture migration, or an Enterprise contract ended for Otter's breach. Cancel at least 24 hours before the renewal date.^[4] Only owners and admins can cancel, and Business cancels on the web only. Seats added mid-cycle bill pro rata; removed seats may return a prorated credit with no cash value, depending on plan and contract, never cash. A new member's own Pro subscription ends the moment they join, with no automatic refund.

App-store billing is its own trap. Subscriptions bought through Apple or Google are managed, cancelled and refunded in the store. Otter cannot cancel them, and uninstalling the app cancels nothing. Buying on the web before a store subscription expires risks a double charge with no refund. Business is sold on the App Store only to users who bought through Apple before, and Otter recommends buying direct.

The bottom line

Otter.ai passes a buyer's checklist when you treat setup as part of the purchase. Lock auto-join and auto-share before syncing calendars, switch off Help improve Otter (training on de-identified data continues outside Enterprise), and match your weekly minutes and long meetings to the right plan. Healthcare teams and anyone needing SSO end up on Enterprise, with a signed BAA or a 100-user license as the price of entry. Everyone else should diary the trial end and the renewal date. Refunds are rarely an option.