Fathom
Fathom
Careful
Fathom says third-party model providers are not allowed to train on your meetings, but Fathom itself uses de-identified meeting content to train its own models unless you opt out. You can opt out in My Settings, and a Team Edition admin can opt out the whole organization. Do that before recording customers. Fathom's help center says the product is HIPAA and SOC 2 Type II compliant and that it does not have ISO 27001.
Last checked 2026-11-10
Data-safety checklist
Trains on your data by default
Yes
The privacy policy says that, based on account settings, Fathom may use de-identified data from meeting content to train and customize its in-house models. The help center says the same, and that Anthropic, OpenAI, and Google are not permitted to train on user data.How to opt out
Steps
Opt out in My Settings. Team Edition organizations can opt out every user from Organization Settings.Data retention
What they keep
Unknown. The privacy policy describes the training use and the opt-out. It does not give one retention period for recordings in the section we read.BAA / HIPAA
Unknown
The help center says Fathom is HIPAA-compliant. It does not say a business associate agreement is signed automatically or how a customer requests one. Treat the BAA as something you must confirm.Certifications
1 listed
- SOC 2 Type II
Enterprise and admin controls
Controls
Team Edition admins can opt the organization out of in-house training. ISO 27001 is not claimed. Fathom points to its trust center for the SOC 2 report.Sources
2 pages