Deepgram

Name: Deepgram business-data verdict
Item: Deepgram
Author: Aaron Simmons

Careful

Last checked 10 Nov 2026 · Reviewed by Aaron Simmons, security practitioner · How we decide

Deepgram's privacy notice, updated November 5, 2026, says it may use Content for AI model training unless you opt out. API callers can opt out on a single request. Saga users opt out in settings, and new content after that is not used for training. The notice says it does not cover end-user audio that a customer submits when Deepgram is only the processor. No day count for audio, no voice-cloning consent rule, and no business associate agreement were in that notice.

Data-safety checklist

Trains on your data by default

Yes

The notice says Deepgram uses Content to develop products, including AI model training, unless you opt out. It also says Deepgram may use Content to train and improve its models. When a customer submits other people's audio, Deepgram says it is the processor and this controller notice does not apply.

How to opt out

Steps

For the APIs, set the training opt-out parameter on the request. That request is then excluded. For Saga, use the opt-out in settings. After that, new Content is not used to train models. Content from before the opt-out is not described as removed from training.

Data retention

What they keep

Deepgram says it keeps personal information for as long as needed for the purposes it was collected, unless a law says otherwise. It does not give a number of days for audio.

BAA / HIPAA

Unknown

The privacy notice we read does not offer a business associate agreement.

Certifications

1 listed

Unknown

Enterprise and admin controls

Controls

Customers who send end-user audio are treated as the controller, and Deepgram says individual questions should go to that customer. The notice does not describe an organization-wide training lock beyond the per-request API opt-out and the Saga setting.