Back to AI Tools
Otter
Risk Overview
Moderate Risk
5.4
/10
Speech to Text
·
Meeting Transcription
·
Meeting Summaries
·
Top Risks
Active class action lawsuit (Aug 2025) for recording meeting participants without consent and using data to train AI. Trains on transcripts (not just audio) which may contain PII even after de-identification. Retains data after user deletion for 'legitimate business purposes.' Non-user meeting participants have no privacy protection. OtterPilot auto-joins meetings and records proactively.
Mitigations
SOC 2 Type II certified. AES-256 encryption at rest. 30-day trash deletion cycle. Custom data retention policies available for Business/Enterprise. Explicit consent mechanism for human-reviewed training. Enterprise security controls available.
Get started
Is your team using
Otter
safely?
Highest Risk Categories
The highest-scoring risk categories identified in this assessment.
Training Use
Otter.ai trains its proprietary AI on de-identified audio recordings AND on transcriptions which may contain Personal Information. Training on transcriptions (not just audio) is particularly concerning as transcripts retain identifying conversation content even when nominally de-identified. Training is automatic without human review. Explicit user rating/consent required for human-reviewed training. De-identification methodology is proprietary and unverified.
7
/10
Legal Terms
Terms include binding arbitration for all disputes. Carve-out for IP infringement claims (can go to court). Class action waiver implied by individual arbitration requirement. Active class action lawsuit (Aug 2025) filed despite arbitration clause, alleging ECPA/California wiretap violations. AISense Inc. is a US (Delaware) company. Mandatory arbitration combined with active litigation signals high legal risk.
7
/10
3rd-Party Sharing
Class action lawsuit (Brewer v. Otter.ai, Aug 2025) alleges Otter records and shares audio/transcripts from ALL meeting participants (not just account holders) without consent - including third parties on video calls. Data processed by Otter's speech recognition infrastructure. Sharing with third-party AI providers for transcription. Lawsuit highlights fundamental consent and sharing issues for non-consenting meeting participants.
6
/10
Unlock the complete assessment
Run a free assessment to access the full AI tool risk analysis.
Updated July 2026 • AI-assisted research • Reviewed by Verax • Report an issue
Reference Documentation
Official documentation and policies referenced as part of this assessment.
Terms of Service
https://otter.ai/terms-of-service
Privacy Policy
https://otter.ai/privacy-policy