AI tools and client data
Is Fireflies.ai safe for client data?
Short answer: Whether Fireflies.ai is safe for client data turns on which plan your staff are on, which account they signed in with, and what you have told them they may put in it — not on the product itself. On Free and Pro (personal account) and on Business and Enterprise, Fireflies.ai says it does not train its models on what staff type, by default. Every fact on this page is Fireflies.ai's own, quoted from its own pages and dated, and where we did not find a statement this page says so rather than filling the gap. Obsidian Ridge's free 30-day AI security assessment shows which AI tools your staff actually use.
See which AI tools your staff usePlan by plan, in Fireflies.ai’s own words
A notetaker that joins calls, transcribes them and writes a summary, with sharing controls on each recap.
| What you are asking | Free and Pro (personal account) | Business and Enterprise |
|---|---|---|
| Trains the vendor's models by default | No. Fireflies.ai says it does not train on personal information and that it holds its vendors to the same rule.“We do not use personal information for AI model training and we contractually prohibit our vendors from using this information for their own model training.” source, read | The same statement: Fireflies.ai's policy does not distinguish plans on training.“We do not use personal information for AI model training and we contractually prohibit our vendors from using this information for their own model training.” source, read |
| How to turn training off | Not found in the pages we read. | Not found in the pages we read. |
| How long data is kept | Fireflies.ai states a zero-retention rule for meeting content with the vendors that process it.“We also impose a Zero Data Retention policy for meeting content, which includes audio, video, transcripts, and summaries of the meeting” source, read | The same zero-retention statement; the policy does not publish a different rule for business plans.“your meeting content and Fireflies Talk data is not: (1) stored by any third-party vendor after processing” source, read |
| What an admin can see or control | Sharing is per recap, which means the default matters: check it before the first client call is recorded.“You can control who can view your meeting recaps and the associated meeting content … through your account settings and sharing controls.” source, read | Admins set retention, workspace access and permissions through groups.“Admins can manage data retention, control workspace access, and set user permissions through Groups” source, read |
| Single sign-on | Not found in the pages we read. | Enterprise only, and Fireflies.ai puts a seat floor under it.“Yes SSO is available within Fireflies on the Enterprise tier (51+ seats).” source, read |
| Business Associate Agreement | Not found in the pages we read. | Fireflies.ai says an agreement is available. Ask which plan it needs and what else has to be switched on before any patient data goes in.“Business Associate Agreements (BAAs) are available for complete protection of PHI” source, read |
| Where the data is processed | Not found in the pages we read. | The United States by default, with other arrangements described for organisations that ask.“By default, your data is securely stored and processed in our US-based cloud infrastructure…” source, read |
An empty cell is not a reassurance and not a criticism. "Not found in the pages we read." means the Fireflies.ai pages listed under Sources, read on the dates shown, do not answer it — so there is nothing for us to repeat, and something for you to ask Fireflies.ai before client information goes near it.
What this means for
The duty does not change because the tool is new. What changes is where the client information ends up.
- Law firms. A client confidence pasted into a personal account has left the firm’s control. Our law firm page sets out the duties we build evidence for; the decision here is whether a personal account may touch a client matter at all.
- Dental and medical practices. Fireflies.ai publishes a BAA position for this product, which is where that conversation starts. See dental practices.
- CPA and accounting firms. Your written information security plan has to describe the tools people actually use, not the ones you approved. See accounting firms.
- Financial advisers. Client account data in a personal assistant is the exposure; see financial advisers.
- Software teams. A coding assistant reads the repository and can run commands, so the question is what it can reach, not what it was asked. See what AI agents on work laptops can reach.
How to tell which version your staff use
The plan is the whole answer, and you cannot tell from the outside. Three ways to find out, in order of how much they prove.
1. Ask
Quick, free, and incomplete. People forget the tool they installed once and the account they signed in with.
2. Look at the billing and the admin console
This finds what the business pays for. It does not find a personal account, which is the one that matters here.
3. Look on the computers
A tool somebody installed themselves never appears in an IT list. Obsidian Ridge’s free 30-day AI security assessment takes a quiet inventory for 30 days and shows what each tool could reach, then a CISSP goes through it with you. See the assessment, or read a sample set of findings.
Settings to check today
From Fireflies.ai’s own documentation. Each one is a change somebody can make this afternoon.
- Set the sharing default on a recap before anyone records a client call, not after.“you can adjust privacy settings for an individual meeting recap and choose whether to share it via a link, with workspace teammates” source, read
Questions we get asked
Is Fireflies.ai safe for client data?
Whether Fireflies.ai is safe for client data turns on which plan your staff are on, which account they signed in with, and what you have told them they may put in it — not on the product itself.
On Free and Pro (personal account) and on Business and Enterprise, Fireflies.ai says it does not train its models on what staff type, by default.
Every fact on this page is Fireflies.ai's own, quoted from its own pages and dated, and where we did not find a statement this page says so rather than filling the gap.
Does Fireflies.ai train its models on what our staff type into Fireflies.ai?
On Free and Pro (personal account) and on Business and Enterprise, Fireflies.ai says it does not train its models on what staff type, by default.
On Free and Pro (personal account): No. Fireflies.ai says it does not train on personal information and that it holds its vendors to the same rule.
Fireflies.ai's own words: "We do not use personal information for AI model training and we contractually prohibit our vendors from using this information for their own model training." (read 2026-11-02).
On Business and Enterprise: The same statement: Fireflies.ai's policy does not distinguish plans on training.
Fireflies.ai's own words: "We do not use personal information for AI model training and we contractually prohibit our vendors from using this information for their own model training." (read 2026-11-02).
How long does Fireflies.ai keep what we put into Fireflies.ai?
On Free and Pro (personal account): Fireflies.ai states a zero-retention rule for meeting content with the vendors that process it.
Fireflies.ai's own words: "We also impose a Zero Data Retention policy for meeting content, which includes audio, video, transcripts, and summaries of the meeting" (read 2026-11-02).
On Business and Enterprise: The same zero-retention statement; the policy does not publish a different rule for business plans.
Fireflies.ai's own words: "your meeting content and Fireflies Talk data is not: (1) stored by any third-party vendor after processing" (read 2026-11-02).
Can an administrator read what our staff typed into Fireflies.ai?
Admins set retention, workspace access and permissions through groups. Fireflies.ai's own words: "Admins can manage data retention, control workspace access, and set user permissions through Groups" (read 2026-11-02).
Will Fireflies.ai sign a Business Associate Agreement for Fireflies.ai?
Fireflies.ai says an agreement is available. Ask which plan it needs and what else has to be switched on before any patient data goes in.
Fireflies.ai's own words: "Business Associate Agreements (BAAs) are available for complete protection of PHI" (read 2026-11-02).
A signed BAA is between your practice and Fireflies.ai; we do not sign it for you, and we do not read a compliance badge as one.
How do we find out which version of Fireflies.ai our staff are using?
Look on the computers. A tool somebody installed themselves, or signed into with a personal account, does not appear in any IT list. Obsidian Ridge's free 30-day AI security assessment takes that inventory for 30 days and shows what each tool could reach.
Sources
Fireflies.ai’s own pages, with the date each was read. Nothing on this page comes from anywhere else.
- fireflies.ai/privacy-policy, read
- guide.fireflies.ai/articles/2154538358-policy-on-keeping-information-safe, read
- trust.fireflies.ai/faq, read
All 15 tools, side by side, or run the AI tool risk checker over the ones you know about.
Other tools people ask about
Same question, different answers. The ones in the same category are the ones staff swap between.
Is Read AI safe for client data?
Meeting notetaker · Read AI
Is Zoom AI Companion safe for client data?
Meeting notetaker · Zoom
Is Otter.ai safe for client data?
Meeting notetaker · Otter.ai