Summary
Recall.ai has 5 vendor-stated rows in the CertReports index, last verified 30 Sep 2026. The strongest row is HIPAA: Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured). This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 21 Sep 2026, Recall.ai displays a HIPAA badge on its trust centre, a vendor claim for which BAA availability is not yet captured in the evidence. As of 21 Sep 2026, Recall.ai states on its trust centre that it holds SOC 2, though no audit report or scope detail is included in the evidence. As of 21 Sep 2026, Recall.ai states on its trust centre that it complies with GDPR. As of 21 Sep 2026, Recall.ai states on its trust centre that it holds ISO/IEC 27001:2022. As of 21 Sep 2026, Recall.ai states on its trust centre that it complies with CCPA / CPRA.
- HIPAA: vendor displays a badge on its trust centre (claim); BAA availability not captured - as of 21 Sep 2026.
- SOC 2 / ISO/IEC 27001:2022: vendor states on its trust centre - as of 21 Sep 2026.
- GDPR / CCPA-CPRA: vendor states on its trust centre - as of 21 Sep 2026.
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 22 Sep 2026; it is regenerated whenever a row changes.
Among ai tools vendors
0verified rows
Category median 0, across 96 indexed ai tools vendors. Recall.ai has no registry-verified row yet, like 73 percent of them; its evidence is vendor-stated or reported.
calendar apimeeting apimeeting botsdktranscription
Compliance grid
- HIPAAVendor-stated
Vendor displays a HIPAA badge on its trust centre (claim; BAA availability not yet captured)
as of 30 Sep 20262 sources
SOC 2Vendor-statedVendor states SOC 2 on its trust centre
as of 30 Sep 20262 sources- GDPRVendor-stated
Vendor states GDPR on its trust centre
as of 30 Sep 20262 sources
ISO/IEC 27001Vendor-statedVendor states ISO 27001:2022 on its trust centre
as of 30 Sep 20262 sources- CCPA / CPRAVendor-stated
Vendor states CCPA on its trust centre
as of 30 Sep 20262 sources
Legal artefacts
Subprocessors (17)
- AIAirbyteData Integration · US
Amazon Web ServicesInfrastructure Hosting · US, EU, JP
AssemblyAI (Optional Subprocessor)Data storage and processing · US, EU- DatadogLogging & Monitoring · US, EU
Google AnalyticsWebsite analytics · US
Google WorkspaceOperations · US- MEMetabaseData Analytics · US
OpenAI (Optional Subprocessor)Data storage and processing · US
PostHogWebsite analytics · US- PYPylonSupport Ticketing System · US
- SCSalesforce.comSales · US
SlackCollaboration · US
SnowflakeData Storage · US- StripePayment Processor · US
- SVSvixWebhook Management · EU
VantaSecurity Portal · US
ZapierInternal Operations · US
Security profile
Displayed as a security profile from public statements, not as attestations, as of 30 Sep 2026.
Change history
- 18 Sep 2026First indexed by CertReports5 evidence rows across 5 frameworks entered the index.
Evidence against regulations
All regulations for Recall.aiHow much of each regulation’s vendor requirements Recall.ai’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read