Compare Meeting note takers
Verdicts and the data-handling fields already on each tool page, from the vendor's published pages. Unknown means that page did not answer.
Share this comparison: /categories/meeting/compare?tools=fathom,fireflies,granola,otter
| Field | FathomFathom | FirefliesFireflies.ai | GranolaGranola | OtterOtter.ai |
|---|---|---|---|---|
| Verdict | Careful | Safe | Careful | Avoid |
| Trains on your data by default | Yes | No | Unknown | Yes |
| Training detail | The privacy policy says that, based on account settings, Fathom may use de-identified data from meeting content to train and customize its in-house models. The help center says the same, and that Anthropic, OpenAI, and Google are not permitted to train on user data. | The security page says Fireflies does not use meeting data to train AI models, and the privacy policy says personal information is not used for AI model training. Vendors are contractually prohibited from using it for their own training. | The policy says third parties are not allowed to use personal data for their model training, and that Granola uses de-identified, aggregated data when you are opted in. It also says you can opt out in settings. Enterprise users have model training off by default and may opt in. | The privacy policy lists training proprietary AI on de-identified audio and on transcriptions, which may contain personal information, as a purpose, under consent or legitimate interests. |
| How to opt out | Opt out in My Settings. Team Edition organizations can opt out every user from Organization Settings. | No training opt-out is required. The security page states the no-training rule as the product behavior. | Use the model-training control in Granola account settings. Enterprise admins start from off and would have to opt in. | We did not find a meeting-training opt-out in the privacy policy. The opt-outs that are written down are for Google Analytics, personalized ads, and the sale or sharing of personal information. |
| Data retention | Unknown. The privacy policy describes the training use and the opt-out. It does not give one retention period for recordings in the section we read. | You can delete transcripts. Enterprise includes custom data retention. A default number of days for standard plans is not stated on the pages we read. | De-identified data that has already been built into a model is not removed, because Granola says that is not technically possible. A retention period for raw meeting audio is not stated in the section we read. | When Otter is a processor, it says it keeps personal information as needed to provide the service or as the law allows. A day count for recordings is not stated. |
| BAA / HIPAA | Unknown | Enterprise only | Unknown | Unknown |
| BAA detail | The help center says Fathom is HIPAA-compliant. It does not say a business associate agreement is signed automatically or how a customer requests one. Treat the BAA as something you must confirm. | Fireflies says it is HIPAA-ready on Enterprise plans with Private Storage and a signed business associate agreement. A data security agreement for education is mentioned the same way. | The privacy policy text we read does not offer a business associate agreement. | The privacy policy text we read does not offer a business associate agreement. |
| Certifications | SOC 2 Type II | SOC 2 Type II; ISO 42001 | Unknown | Unknown |
| Enterprise and admin controls | Team Edition admins can opt the organization out of in-house training. ISO 27001 is not claimed. Fathom points to its trust center for the SOC 2 report. | Enterprise includes private storage, a rules engine, custom retention, super admin, and single sign-on. Meeting content stays inaccessible without user consent, according to the security page. | Enterprise model training is off unless the organization opts in. Individual accounts use the in-product setting. | Unknown. The policy describes processor terms when there is an agreement, but it does not document an admin switch that stops model training. |
| Last checked | 10 Nov 2026 | 10 Nov 2026 | 10 Nov 2026 | 10 Nov 2026 |