Fireflies.ai
low riskAI Meeting Assistantfireflies.aiverified 2026-06-27
Data-handling profile
- Trains on input
- No — does not train on customer inputs
- Retention
- Zero Data Retention policy for meeting content (audio, video, transcripts, summaries) with all third-party vendors/subprocessors — not stored, accessed, or used for AI model training after processing. Customer retains ownership; deleting a meeting purges it immediately and irreversibly. General account data retained ~12 months by default, user-controlled.
- Data region
- US
- Certifications
- SOC 2 Type IIGDPRHIPAA
- DPA available
- Yes
- Breach history
- none known
- EU AI Act
- Contractual zero-retention and no-training-on-content commitments plus SOC 2/GDPR/HIPAA certification give a strong compliance posture for EU AI Act meeting-transcription use cases.
Sources
- https://fireflies.ai/security
- https://fireflies.ai/privacy-policy
- https://guide.fireflies.ai/articles/2154538358-policy-on-keeping-information-safe
- https://guide.fireflies.ai/articles/9596505232-learn-about-data-storage-and-transfer
Every fact above is drawn from the vendor's public documentation, reviewed by a human, and version-stamped. Monitored daily for changes.
Change history
No material changes recorded since monitoring began.