Otter is a transcription service that converts spoken language into written text, ideal for meetings, interviews, and lectures, enhancing collaboration and note-taking efficiency.
Otter.ai is an AI-powered transcription platform that converts spoken language into searchable, editable text in real-time, delivering its core value by automating note-taking to boost productivity and collaboration in meetings, interviews, and lectures.[1][3][7] Key features include speaker identification, timestamps, custom vocabulary, OtterPilot for automatic meeting joins on Zoom, Google Meet, and Microsoft Teams, AI Chat for querying transcripts and generating summaries or emails, and support for uploading audio/video files up to four hours long.[1][3][4][5]
It targets professionals, teams, educators, and students who need efficient capture of discussions, with seamless integrations for calendars, Slack, Dropbox, and CRM tools to streamline workflows.[3][4][7] What sets Otter.ai apart is its high-accuracy real-time transcription, collaborative editing with @mentions and action items, automated insights like summaries and word clouds, and secure sharing options including SSO and admin controls, making it a comprehensive meeting agent beyond basic transcription.[1][2][5][7]
Otter.ai explicitly reserves the right to use machine learning on user data for model improvement and optimization, but
No training opt-out mechanism was identified in the legal documents.
Moderate risk. Suitable for internal data but avoid confidential information.
Otter.ai explicitly reserves the right to use machine learning on user data for model improvement and optimization, but restricts this to 'Usage Data' (aggregated/anonymized) rather than User Content itself. However, the distinction between Usage Data and User Content is somewhat vague, and the language permits broad ML processing.
“[ToS] 'Nothing in these Terms prohibits Company from using such Machine Learning for testing, tuning, optimizing, validating, or otherwise enhancing the analytics, models, or algorithms underlying the Service.'”
Otter.ai grants itself a broad, sublicensable license to User Content for service delivery purposes, but explicitly states the customer retains ownership. The license includes rights to 'modify, export, process, transform, and distribute' content, which is broader than strictly necessary for service provision.
“[ToS] 'You grant Otter.ai a worldwide, non-exclusive, royalty-free, fully paid right and license (with the right to sublicense) to host, store, transfer, display, perform, reproduce, modify, export, process, transform, and distribute your User Content...in a manner that is under your control.'”
Otter.ai shares data with subprocessors (AWS, payment processors) under DPA requirements, and publishes a subprocessor list. However, the DPA permits sharing with 'affiliates' and the terms allow export to third-party services at user discretion. Aggregated/deidentified data may be used for business purposes without restriction.
“[DPA] 'Company will enter into a written agreement with Subprocessors which imposes the same obligations as required by Data Protection Law.' [ToS] 'Otter.ai may collect, create, process, transmit, store, use, and disclose aggregated and/or deidentified data...for its business purposes, including for machine learning and training.'”
Otter.ai provides a trash folder with 'specified period' retention but does not clearly define that period in the ToS. Deletion is available on request, but the exact timeline and backup retention policies are vague. DPA states data will be returned or destroyed upon termination but allows retention if required by law.
“[ToS] 'Customer may delete User Content from their account where it may be stored in a separate trash folder provided with the service for a specified period unless they choose to delete it from the trash folder.' [DPA] 'Upon termination of the Terms of Service, the Company will, upon Customer's request, return Customer Personal Data...or securely destroy such Customer Personal Data unless applicable laws prevent the Company.'”
Otter.ai explicitly states that customers retain all ownership rights to User Content and transcriptions. The license granted to Otter.ai is limited to service delivery and does not grant the vendor ownership or exclusive rights to outputs.
“[ToS] 'Customer retains all ownership rights to the User Content processed using the service.' [ToS] 'As between you and Otter.ai, you retain any copyright and other proprietary rights that you may hold in the User Content that you post to the Service.'”
Otter.ai mentions SOC 2 Type II certification for AWS infrastructure and includes GDPR DPA and U.S. State Privacy Law DPA, but does not explicitly claim its own SOC 2, ISO 27001, or HIPAA certifications. Security measures are documented but formal compliance certifications are not clearly stated.
“[DPA Appendix 3] 'User Content is hosted by Amazon Web Services (AWS), which is certified SOC 2 Type 2.' [ToS] 'Otter.ai will employ commercially reasonable security measures that are designed to protect Data in its possession or control against unlawful or unauthorized access.'”
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai