Home › Answers › Data, privacy and GDPR
Is Otter AI GDPR compliant and safe for business?
Short answer
Otter.ai says it has a SOC 2 Type 2 report, encrypts stored data with AES-256 and has "incorporated GDPR standards" into its practices. That's a claim about Otter's side. Under UK GDPR, you are still responsible for telling people you're recording, having a lawful reason, and not keeping recordings longer than you need.
What Otter says it does
From Otter's privacy and security page:
- Security: SOC 2 Type 2 report, AES-256 encryption on AWS storage, two-factor sign-in on all plans.
- Training: Otter trains its own models on recordings and transcripts after de-identifying them with a proprietary method. It says this is automatic and humans don't listen to audio for training.
- Human access: staff need your explicit consent before accessing a transcript or recording to troubleshoot.
- Third-party AI providers: don't use Otter customer data to train their models.
- Deletion: deleted conversations go to Trash and are removed after 30 days, or straight away if you empty the Trash.
- Data requests: Otter is a US company and says it follows US legal process for government requests.
What you must do
- Tell people. Otter's privacy page says users must ask for consent and say when they're recording. The ICO's guidance on monitoring says to tell people calls are recorded and why.
- Have a reason. Record for a clear purpose, such as an accurate note of what a client agreed.
- Limit it. Delete recordings when you no longer need them.
- Be careful with sensitive calls, such as health or financial details.
Related questions
Is Otter AI confidential?
Otter says conversations are private to you and the people you share them with. Check sharing settings on each conversation.
Can Otter record phone calls?
Not directly. See can Otter AI record phone calls?
How much does Otter cost?
The Basic plan is free with 300 transcription minutes a month. See our Otter tool page.
Sources
Checked 17 October 2026. Rules and prices change, so check the source before you rely on it. This is general information, not legal, tax or financial advice.
More on data, privacy and gdpr
- Are AI detection tools accurate?
- Are AI tools secure for business?
- Are ChatGPT chats private? Can OpenAI read them?
- Are Microsoft Copilot chats private?
- Can AI agents be trusted?
- Can I put customer data into ChatGPT?
All data, privacy and gdpr answers · All answers · Guides · AI tools directory
Get one useful AI tool in your inbox each weekday
Free, plain English, five minutes to read. Unsubscribe any time.
See our privacy notice.