Otter.ai

Security and trust center evidence

Otter AI Meeting Agent supports real-time transcription, live chat, automated summaries, insights, and action

otter.ai AI assistantsLast verified 1 Nov 2026

Request the report Are you Otter.ai?

Otter.ai has 1 registry-verified row and 5 vendor-stated rows in the CertReports index, last verified 1 Nov 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.

Reviewer brief

Otter.ai states on its trust centre that it holds SOC 2, GDPR, CCPA/CPRA, and TX-RAMP alignment, as of 17 Sep 2026. For HIPAA, Otter.ai displays a badge on its trust centre as of 17 Sep 2026, though the evidence notes BAA availability has not yet been captured. Otter.ai is listed in the EU-US Data Privacy Framework registry as of 17 Sep 2026, with active EU-US, Swiss-US, and UK Extension Certifications. That EU-US Data Privacy Framework listing was issued 30 Aug 2018 and is set to expire 28 Mar 2027, as of 17 Sep 2026. All SOC 2, GDPR, CCPA/CPRA, TX-RAMP, and HIPAA claims for Otter.ai rest on vendor statements rather than registry listings, as of 17 Sep 2026.

SOC 2: vendor states it holds SOC 2 on its trust centre - vendor-stated, not registry-verified (as of 17 Sep 2026).
HIPAA: vendor displays a badge on its trust centre; BAA availability is not documented in the evidence (as of 17 Sep 2026).
EU-US Data Privacy Framework: active EU-US, SW-US, UK Extension Certifications, issued 30 Aug 2018, expiring 28 Mar 2027 (as of 17 Sep 2026).

Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.

Among ai assistants vendors

1verified rows

Category median 0, across 28 indexed ai assistants vendors. Otter.ai has more verified rows than 57 percent of them.

collaborationmeeting-notesmeeting-transcriptionreal-time-transcription

Compare with similar vendors

Pick your own comparison

Compliance grid

No public evidence yet for FedRAMP, PCI DSS, ISO 27001, CSA STAR, Cyber Essentials, ISO 27701, ISO 42001. This does not mean the vendor lacks them; it means nothing public was found at the last check.

Legal artefacts

Subprocessor list

On request · Listed on the trust centre as "Subprocessors" · as of 1 Nov 2026

Open

Subprocessors

No subprocessor list captured yet.

Security profile

Pen test cadence: report available

Displayed as a security profile from public statements, not as attestations, as of 1 Nov 2026.

Change history

17 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
17 Sep 2026GDPR evidence addedA GDPR row entered the index with state Vendor-stated.
17 Sep 2026HIPAA evidence addedA HIPAA row entered the index with state Vendor-stated.
17 Sep 2026SOC 2 evidence addedA SOC 2 row entered the index with state Vendor-stated.
17 Sep 2026TX-RAMP evidence addedA TX-RAMP row entered the index with state Vendor-stated.