Fireflies.ai Enterprise Risk Assessment | AI Tool Risk

Back to AI Tools

Fireflies.ai

Risk Overview

Moderate Risk

3.7

/10

Speech to Text

Meeting Transcription

Meeting Summaries

Top Risks

Active BIPA class action lawsuits (2025-2026) alleging unauthorized biometric voiceprint collection from non-consenting participants; mandatory arbitration + class action waiver; calendar integration provides access to meeting schedules; bot joins meetings on behalf of users; CRM integrations push meeting data downstream; non-account-holders recorded without explicit consent.

Mitigations

Zero-data-retention policy for audio/video at third-party vendors; explicit prohibition on training with user content; SOC 2 Type II + HIPAA certified; DPA available; GDPR/EU-US DPF compliant; 30-day arbitration opt-out window.

Get started

Is your team using

Fireflies.ai

safely?

Book a Demo Free Assessment

Highest Risk Categories

The highest-scoring risk categories identified in this assessment.

Legal Terms

Mandatory binding arbitration clause with class action waiver. 30-day opt-out available. Disputes resolved per AAA rules. Liability capped at fees paid in prior 12 months. Two active BIPA class action lawsuits (Cruz v. Fireflies Dec 2025; Fricker v. Fireflies Mar 2026) for alleged unauthorized biometric voiceprint collection from non-consenting meeting participants.

/10

3rd-Party Sharing

Shares with standard service providers and subprocessors for service delivery. No selling of data. CRM integrations (Salesforce, HubSpot, Slack, Zapier) receive meeting content at user direction. Third-party AI providers used for processing under zero-retention agreements.

/10

Data Retention

Zero Data Retention (ZDR) policy for audio/video/transcripts held by third-party vendors post-processing. User data retained until account deletion. Account deletion processed within commercially reasonable efforts. Business/Enterprise have stronger deletion guarantees under DPA.

/10