VoiceVault › Guides

Is Otter AI safe? Privacy, the lawsuit, and safer settings

Updated 3 November 2026 · 7 min read
Short answerFor most everyday meetings, Otter is a reasonable choice: it lists SOC 2, encryption at rest and in transit, and HIPAA in its trust center. The trade-offs are that your recordings live in Otter's cloud (on Amazon Web Services in the US), its privacy policy says it trains its AI on de-identified audio and on transcripts, and its meeting bot can join calls automatically. A 2025 class action alleges the bot recorded people without consent; Otter disputes this and the case is ongoing. Turn off auto-join and auto-share, tell everyone you're recording, and keep confidential meetings off any cloud tool.

We make VoiceVault, an on-device meeting recorder for Android. We've tried to be fair to Otter, which suits many people well. This is general information, not legal advice.

Is Otter AI safe? For most people and most meetings, it's a reasonable tool from a company that publishes its security controls. But "safe" depends on what you record. This guide sets out what Otter stores and where, what its own policies say about AI training, how its meeting bot behaves, what the 2025 lawsuit claims, and the settings that lower the risk.

What Otter stores, and where

Otter is a cloud service. You sign in with an account, and your recordings and transcripts are processed and kept on Otter's side so you can reach them from the web, your phone and your team.

Otter's security: what it publishes

Otter's trust center lists these compliance items: SOC 2, HIPAA, GDPR, CCPA, TX-RAMP Level 2 and a VPAT. Among its controls it lists encryption at rest, encryption in transit, data erasure, a separate production environment, penetration testing and background checks for staff. The trust center shows these as titles; the detailed reports are available on request.

That's a solid list for a cloud product. It protects data against outsiders. It doesn't change the fact that a copy of every meeting sits in Otter's cloud, under Otter's policies.

Does Otter train AI on your recordings?

Yes, in de-identified form. Otter's privacy policy says it uses data to improve its services, "including training our proprietary AI technology on de-identified audio recordings and on transcriptions (which may contain Personal Information)." The legal basis it gives is consent or legitimate interests.

If training is a concern for your organization, ask Otter directly what applies to your plan, and get the answer in writing.

OtterPilot, auto-join and consent

Otter's OtterPilot page says you can schedule its meeting agent to "automatically join all your Zoom, Microsoft Teams, and Google Meet meetings" from your calendar. That's convenient for the person who set it up. For everyone else on the call, a bot appears and records them, including guests who never signed up for Otter.

That's where consent matters. In US states that require everyone's consent, and in many workplaces, every participant needs to know and agree. See one-party and all-party consent states in the US and recording a meeting in Canada.

The Otter AI lawsuit (Brewer v. Otter.ai)

In August 2025, Justin Brewer of California filed a proposed class action against Otter.ai in the US District Court for the Northern District of California, NPR reported. It has since been combined with other suits as In re Otter.AI Privacy Litigation.

What the plaintiffs allege: that Otter's notetaker joined meetings and recorded participants without the consent of everyone in them, that Otter typically asked only the host for permission, that it used the conversations to train its AI, and that its de-identification doesn't reliably remove confidential information. They claim this breaks federal and state wiretap and privacy laws.

Otter's position: Otter disputes the claims. In court, it argued that its notetaker joins as an invited participant and acts as the host's recording tool. Otter didn't comment to NPR when the suit was filed, and declined to comment on the August 2026 ruling, according to UC Today.

Where it stands: on 13 August 2026, Judge Eumi K. Lee granted Otter's motion to dismiss in part and denied it in part. Claims under the federal Wiretap Act, California's Invasion of Privacy Act, Illinois's Biometric Information Privacy Act, California's unfair competition law and unjust enrichment were allowed to proceed. Others, including the federal computer fraud claim and the Washington Privacy Act claim, were dismissed, several with permission to amend. At this stage a court assumes the complaint's allegations are true; the ruling is not a finding that Otter broke the law.

How to use Otter more safely

  1. Turn off auto-join unless you really want the bot in every meeting. Otter's help center has a guide to stopping OtterPilot from automatically joining. If it still appears, check whether your calendar is still connected.
  2. Turn off auto-share so notes don't go to every participant by default. Otter's help center covers this too.
  3. Announce the recording at the start, and again for late joiners. If anyone objects, remove the bot.
  4. Keep sensitive meetings out: HR, legal, medical and board conversations may need a tool your organization has approved, or no recording at all.
  5. Delete what you don't need, and ask Otter about training if your plan or contract should exclude it.
  6. Check your employer's policy. Many organizations restrict which AI tools can hear confidential information.

When an on-device tool is the better fit

Otter is the better choice if you want a bot in your Zoom or Teams calls, shared team notes, or access from the web and an iPhone. But for in-person meetings where the recording shouldn't leave the room, an app that does the work on your phone avoids the cloud questions entirely. More on that in AI notes for confidential meetings.

VoiceVault records the meeting in the room through your Android phone's microphone (Android 13 and newer) and transcribes and summarizes it on the phone. There's no account and no VoiceVault server, so we never receive your recordings, and it works in airplane mode. Its speaker labels group voices within a single recording; it doesn't keep voiceprints to recognize people across recordings. It doesn't join Zoom or Teams and doesn't record phone calls. Try it free for 30 days, then pay once. And where the transcript is made doesn't change consent: still tell everyone you're recording.

Every meeting, written up. Right on your phone.

VoiceVault for Android: transcripts, summaries and to-dos with no account, no servers and no subscription. 30 days free, then pay once.

Get it on Google Play

Comparing options? See an Otter alternative that works without the cloud.

Questions

Is Otter AI safe to use?

For routine meetings, most people will find it reasonable. Otter lists SOC 2, encryption at rest and in transit, and HIPAA in its trust center. The main questions are that your recordings are stored in Otter's cloud, that its policy allows training its AI on de-identified audio and transcripts, and that its bot can join meetings automatically.

What is the Otter AI lawsuit about?

Brewer v. Otter.ai, filed in August 2025 in federal court in California and now part of In re Otter.AI Privacy Litigation, alleges that Otter's notetaker recorded meeting participants without their consent and used the conversations to train its AI. Otter disputes the claims. In August 2026 the judge let several claims go forward and dismissed others; that was not a finding that Otter broke the law.

Does Otter use my recordings to train its AI?

Otter's privacy policy says it trains its proprietary AI on de-identified audio recordings and on transcriptions, which may contain personal information. The policy lists consent or legitimate interests as the legal basis and says you can withdraw consent; it doesn't describe a dedicated training opt-out setting.

How do I stop Otter from joining my meetings?

Otter's help center has articles on stopping OtterPilot from automatically joining your meetings and on turning off auto-share. If the bot still appears, check whether your calendar is still connected to Otter.

Where does Otter store my data?

Otter's privacy policy names Amazon Web Services, based in the United States, as a cloud provider, and its trust center lists AWS hosting. Your recordings and transcripts are tied to your Otter account.

Sources

Otter's policies, its trust center and the court record were checked on 3 November 2026. Policies and cases change; check Otter's current pages and the docket for the latest.

More guides

An Otter alternative that works without the cloudOtter transcribes in its cloud and needs an account and a connection. When that matters, and Android apps that transcribe meetings on the phone instead.AI note takers without a subscriptionOtter, Fireflies and Plaud bill monthly because your meetings run on their servers. What that costs over three years, and when paying once makes sense.How to transcribe an in-person meeting on AndroidWhere to put the phone, which app to use and what to do afterwards, so an in-person meeting gives a clean transcript, speaker names and a usable summary.Speech-to-text on Android without internet: what actually worksWhich Android apps really do speech to text offline, from voice typing to full meeting transcripts, and a two-minute test to check any app yourself.How to write meeting minutes, with a templateA free meeting minutes template to copy, a worked example, and how to write minutes: what to include, what to leave out, and how to get them done for you.How to write action items people actually doWhy meeting action items get dropped, the four things each one needs, before-and-after examples, and how to follow up without nagging.AI notes for confidential meetingsWhat a cloud AI note taker does with your recordings, what to ask before using one for HR, legal, board or medical meetings, and how on-device apps differ.Recording a meeting in Canada: what the law says about consentCanada's one-party consent rule, when privacy law means telling people, Quebec, recording at work and AI note takers. With sources; not legal advice.Recording a meeting in the US: one-party and all-party consent statesWhich US states are two-party (all-party) consent states, how federal law works, calls across state lines and AI note takers. Sourced; not legal advice.Plaud vs Otter: a recorder or an app for meeting notes?Plaud vs Otter compared: device and plan prices, minute limits, where your audio is processed, phone calls and meeting bots, and a phone-only option.A Plaud alternative without another deviceLooking for a Plaud alternative? Compare Google Recorder, Samsung Voice Recorder, Otter and VoiceVault, and see when Plaud is still the better buy.Plaud Note: what it does, what it costs, and alternativesNot a hands-on Plaud Note review: what the recorder does, its price and AI plans, where audio is processed, and alternatives, from Plaud's own pages.Fireflies alternative: which one fits how you meetLooking for a Fireflies alternative? How Fireflies works, what it costs, and the best options for bot-free, in-person and private meetings.Read AI: what it does, what it costs, and alternativesA Read AI review from its own published information: how it joins meetings, plan prices and limits, privacy, and alternatives for in-person meetings.The best voice recorder with transcription for AndroidVoice recorder apps with transcription for Android compared: Google Recorder, Samsung Voice Recorder, Otter and VoiceVault. Cost, limits, cloud vs phone.One on one meeting template for managersA practical one on one meeting template for managers: agenda, questions to ask, follow-ups, a copy-and-paste version and how to record respectfully.How to take meeting notes that people actually useHow to take meeting notes: three simple methods, what to capture and skip, what to do right after, and handwriting vs typing vs recording.