AI Notetaker Vendor Claim Tracker
Every entry below is a place where a vendor's own pages disagree with each other, or where a claim made on a sales page has nothing behind it in that vendor's own documentation. Each entry cites the vendor's own URLs and the date we read them.
We record what is published, not what a vendor may hold privately. A certificate that exists but does not appear on the vendor's own site is not recorded here as held. When two vendor pages disagree, we take the weaker claim.
One question generates enough of these on its own to deserve a page: what each vendor publishes about training AI models on your meetings. Every one of those sentences, quoted verbatim with its source and date, is on which AI notetakers train AI on your meeting data.
47 findings, across 13 vendors, last verified 2026-09-09.
Avoma (4 findings) #
US revenue-team meeting assistant combining an AI notetaker with scheduling, sold as a base seat plus separately priced conversation-intelligence and revenue-intelligence add-ons.
Avoma's pricing page lists HIPAA compliance as an Enterprise-tier feature.
HIPAA appears nowhere on Avoma's security page and nowhere in its privacy policy, and no Business Associate Agreement is offered, scoped or priced. The claim exists on the page that sells the tier and on no page that documents it.
2026-09-01
Avoma is frequently listed in comparison tables as holding an ISO certification.
The standard Avoma's security page actually names is ISO/IEC 42001:2023, the AI management systems standard. That is not ISO/IEC 27001, the information security standard procurement teams screen for, and the two are routinely conflated because both begin "ISO". Avoma publishes no ISO 27001 certificate.
2026-09-01
Avoma states that it does not use customer data to train AI or machine learning models.
The sentence is scoped: it covers "[d]ata obtained through Google Workspace APIs", a restriction Google's own API terms impose on every developer. Avoma publishes no equivalent statement covering meeting recordings and transcripts, which are the overwhelming majority of what the product captures. The narrowest possible commitment is being read as the broadest.
2026-09-01
Avoma's annual billing carries a 33% discount.
It does on two tiers and not on the third. Organization falls from $39 to $24 per seat on annual billing; Enterprise is $39 per seat whether billed monthly or annually. Committing to a year buys a 38% reduction one tier down and nothing at the top, which inverts the usual direction of enterprise discounting.
2026-09-01
Fathom (2 findings) #
US meeting assistant for Zoom, Google Meet and Microsoft Teams, built around a free tier with unlimited recording and deep HubSpot and Salesforce sync.
Fathom's Premium plan for individuals is priced at $20/user/month, while the Team plan - which includes everything in Premium plus global search and collaboration - is $19/user/month.
The individual tier costs more than the strictly larger team tier. A solo buyer taking Fathom at its word pays $60/year more than a two-person team pays per seat for a superset of the same product.
2026-09-09
Fathom is widely listed as offering "25+ languages", a figure this site itself published until 26 August 2026.
Fathom's own help centre documents 38 transcription languages. The lower figure appears to have propagated between comparison sites without anyone re-reading the vendor page.
2026-08-26
Fireflies.ai (4 findings) #
US meeting assistant with the broadest published language coverage in the category and the only flat, unqualified refusal to train on customer data among the tools assessed.
The pricing page advertises the Free tier as "Unlimited transcription", while the knowledge base states the Free plan gives "3 free meeting transcriptions" by default, with unlimited transcription unlocked only by enabling Auto Join.
The same pair of pages also disagrees on storage: "400 mins storage/team" on the pricing page versus "400 minutes of storage per seat" in the knowledge base. Team-wide and per-seat are materially different limits, and neither page acknowledges the other. Between our reading of 2026-08-27 and our reading of 2026-09-09 Fireflies also moved this knowledge-base article to a new URL and changed the per-seat storage figure it publishes from 800 minutes to 400 minutes; the original article no longer resolves, so the earlier figure can no longer be verified against the vendor.
2026-09-09
The pricing page advertises the free plan as offering "Unlimited transcription".
The knowledge base qualifies that transcription is free only for calendar meetings and captures made through the app, bot or Chrome extension, and that everything is bounded by a hard storage ceiling — uploaded audio consumes credits. "Unlimited" describes the meter, not the plan.
2026-08-27
Fireflies markets bring-your-own-storage as EU data residency.
Storage location and processing location are different controls. Under GDPR it is the processing that triggers transfer obligations, and Fireflies confirms processing stays in the US regardless. A buyer who needs EU processing is not served by this feature.
2026-08-27
Fireflies' security page states: "0-day retention policy ensures that your meeting data is never used for AI model training."
Two different things are being run together. The 0-day retention policy applies to third-party vendors and partners; Fireflies' own privacy policy confirms Fireflies stores account data and meeting content "for as long as your account remains active". The no-training commitment is real and stated separately, but a buyer reading "0-day retention" as a description of how long Fireflies itself keeps their meetings would be wrong.
2026-09-09
Granola (5 findings) #
Bot-free desktop and mobile notetaker that captures system audio rather than joining the call, priced at $14 per user per month for its paid tier.
The pricing page describes the free tier's history limit only as "See limited meeting history", with no figure.
The 30-day number appears nowhere on the pricing page or in the help centre — only in a blog post: "The Basic plan gives you a rolling 30-day window of note access." The commercially decisive limit of the free plan is published in the least authoritative place Granola writes.
2026-08-27
Granola's pricing page states Enterprise at "$35 per user per month"; its blog states "$35+/user/month".
The "+" is absent from the canonical pricing page. A buyer budgeting from the pricing page is budgeting from a figure the vendor treats as a floor elsewhere.
2026-08-27
Granola publishes per-seat prices for every tier including Enterprise, which almost no competitor does.
No annual rate exists at all: "Annual plans are not currently available; billing is monthly only." Every competitor assessed discounts annual billing by 20-50%, so Granola's $14 headline is the only price in the category that cannot be compared like-for-like against a rival's annual rate.
2026-09-09
Granola publishes two different minimum macOS versions for the same product.
Its Google Meet blog page says "macOS 13 or above", while its own setup guide says "Granola requires a minimum macOS 14 to run". An IT team sizing a fleet upgrade gets a different answer depending on which vendor page it reads.
2026-09-09
Granola describes the Enterprise AI-training default in two different ways.
The blog says "the entire organization is opted out of AI training by default", while the privacy policy says "Enterprise users have model training turned off by default, but may opt-in through the Services." The blog omits the opt-in path.
2026-09-09
Jamie (4 findings) #
A no-bot desktop notetaker sold on EU data residency and an ISO 27001 certificate, priced per meeting volume rather than per seat at the individual tiers.
Jamie's pricing page lists "Notes & transcripts in 99+ languages" against every tier.
Jamie's own marketing pages also say "100+ languages". The gap is small, but that figure is the only language coverage information Jamie publishes - there is no list of which languages are supported, at what quality, so neither number can be checked by a buyer who needs a specific language. A vendor that cannot keep its own headline count consistent across two of its pages has not published a verifiable claim.
2026-09-09
Jamie's Pro plan at €39/month is the tier for an individual who wants unlimited meetings.
Jamie's Team plan is €33 per seat per month for the same unlimited meetings and the same 5-hour limit. A single user on Pro therefore pays €6/month more than someone buying a seat in a team - the individual plan is the most expensive way to use the product per person. Both figures are on the same pricing page.
2026-09-09
Jamie publishes two incompatible data-residency perimeters.
The security page says "All data storage and processing stays within the EEA, Switzerland, and the UK", while the llm-info page says all data is "hosted and processed exclusively in the EU on servers in Germany". Switzerland and the UK are not in the EU, so the two statements describe different perimeters. A buyer with a strict EU-only requirement cannot tell from vendor sources which one is contractual.
2026-09-09
Jamie's pricing page has produced two different monthly prices for the same two tiers within three days.
Read on 2026-09-07 the page gave "Plus - Monthly: €25 / Annual: €21/month (17% discount)" and Pro at €47 monthly. Read again on 2026-09-09 the same page gave €25.27 for Plus and €46.99 for Pro. Jamie publishes no changelog, no VAT note and no statement of any kind explaining the difference, so a buyer cannot tell whether the price changed, whether tax or currency handling changed, or which figure is the contractual one. The verbatim-quoted figures are recorded here.
2026-09-09
Krisp (4 findings) #
Bot-free notetaker built on a noise-cancellation engine, capturing meetings through a virtual microphone and speaker rather than joining the call.
Krisp publishes two different language counts on its own domain: the help centre enumerates exactly 16 by name, while two marketing pages claim 17.
The seventeenth language is never named anywhere on krisp.ai. The enumerated list is the only figure that can be checked, and it says 16.
2026-08-27
The pricing page presents Krisp's zero-cost option purely as "Free Trial… Free for 7 days".
A live help article describes an ongoing free plan with daily quotas and no stated expiry. A buyer reading the pricing page concludes no free tier exists; a buyer reading the help centre concludes one does. The help article carries no last-updated date, so neither can be confirmed as current.
2026-08-27
Krisp's /security page routes visitors to a gated Trust Center, while a separate ungated page at krisp.ai/security-for-ai-meeting-assistant publishes SOC 2 Type II, AES-256 at rest, TLS 1.2 in transit, HIPAA/ePHI controls and US-only data storage in full.
Krisp's security posture is materially stronger than its own primary security page lets a buyer discover. Comparison tables that check krisp.ai/security alone - as this record did until today - will understate Krisp on certifications and overstate its opacity.
2026-09-09
Krisp's product page frames capture as on-device: "Krisp works directly at the audio level on your device".
The help centre FAQ concedes audio is "either transcribed entirely on device or sent to our servers for transcription and then immediately deleted." A buyer choosing Krisp specifically because processing is local is not told on the marketing page that a server path exists.
2026-09-09
MeetGeek (3 findings) #
Meeting assistant for Zoom, Google Meet and Microsoft Teams with EU hosting in Ireland, sold on transcription-hours quotas rather than per-recording limits.
MeetGeek's security page carries ISO 27001 among its security assurances.
The sentence in full reads "AWS provides a comprehensive list of compliance and regulatory assurances, including SOC 1-3 and ISO 27001" - the certificate described belongs to Amazon Web Services, MeetGeek's hosting provider, not to MeetGeek. A buyer scanning the page for ISO 27001 finds the term present and the certification held by a third party. MeetGeek publishes no ISO 27001 certificate of its own.
2026-09-07
MeetGeek advertises "Zero data training" as a product benefit on its security page.
The privacy policy - the document that would actually bind the commitment - contains no statement about AI or machine-learning model training of any kind. The strongest thing it says about access is "Meetgeek does not access your recordings and transcripts at any point, unless you personally share access with individual employees for technical support." The training promise exists only as marketing copy.
2026-09-07
HIPAA appears in MeetGeek's compliance badges.
No Business Associate Agreement is offered, scoped, tiered or priced anywhere on the site, and the privacy policy does not mention HIPAA. A covered entity has a badge and nothing on the vendor's own domain to evaluate it against - the same gap Fathom has.
2026-09-07
Noota (4 findings) #
French meeting assistant hosted in European datacenters, built around customisable report templates, interview scorecards, an integrated phone system and the widest published ATS integration list of any tool assessed here.
trust.noota.io states "Noota is ISO 27001 certified" and "Noota maintains SOC 2 Type II compliance".
noota.io/security, on the same company's own domain, states Noota is "actively preparing for ISO 27001" and describes "our SOC 2 (Type 2) ongoing certification (audit schedule S2 2025)". A third Noota property, the noota.io homepage, carries the badges "SOC 2 Type II Certified" and "ISO 27001 Compliant" while also, on that same page, describing only "ISO 27001-aligned practices" - so the homepage contradicts itself within a single page by calling the same standard both "Compliant" and "aligned practices". Three Noota-owned properties therefore give buyers three different answers, and none publishes a certificate number, scope, certifying body or validity date. We score the weakest of the claims.
2026-08-31
noota.io/products/audio-transcription is headlined "Precise Text in 30+ Languages".
Noota's own Supported Languages help article enumerates 66 distinct languages across roughly 93 locales. The product page understates the vendor's own capability by more than half, and no page anywhere states a single figure a buyer could cite.
2026-08-26
The pricing page sells "Zapier & API" as a Business plan feature.
The plans help article lists "API & Webhooks" as available on Business and Enterprise but also states "Automation (Zapier, Make) – coming soon". There is no developer portal, endpoint reference or authentication documentation anywhere on noota.io or the help center, so a paid feature is advertised with nothing published that would let a buyer evaluate or use it.
2026-08-26
Data retention is presented as a headline control.
Three different maximums are published across three Noota-owned pages: noota.io/security says "From 1 day to 3 year", trust.noota.io says "1 day to 3 years", and the Company General Settings help article says "a duration from 1 day to 24 month".
2026-08-26
Notta (3 findings) #
Transcription-first tool sold on monthly minute quotas rather than per-seat meeting capture, with the strongest published encryption standard and the weakest published data residency of the tools assessed here.
Notta's pricing page states: "Notta is SOC2 Type II and ISO 27001 certified and implements firewalls and access restrictions on our servers to preserve the integrity and security of your information."
Notta's own security page does not claim ISO 27001 certification. It says: "ISO 27001 is the international standard for information security. Notta follows the guidelines to secure user information in all forms and protect confidentiality of data." Following a standard's guidelines is a description of intent; certification is an audited outcome. Same vendor, two pages, one says certified and the other says follows the guidelines.
2026-09-07
Notta publishes a security page covering encryption, certification and infrastructure.
It names no data residency region. The strongest statement is that Notta "hosts all its software on Amazon Web Services" - which is a vendor, not a location. A buyer under an EU residency requirement cannot answer that requirement from Notta's own site, despite the site having a page dedicated to exactly this question.
2026-09-01
Notta offers an Enterprise tier for larger organisations.
It is gated at a minimum of 51 seats - by a wide margin the highest seat floor among the tools assessed here, against 10 for Avoma and 2 for Fathom's team plans. The features behind that floor are SAML SSO, full data access control and audit logs: a 40-person company with an SSO mandate cannot buy Notta at any price.
2026-09-01
Otter.ai (4 findings) #
US meeting assistant for Zoom, Google Meet and Microsoft Teams, with the largest consumer install base in the category and a metered free tier.
Otter publishes two different monthly limits for the same Business plan: the pricing page states "Unlimited meetings + in-app recordings", while otter.ai's homepage states "6000 monthly transcription minutes - 4 hours per conversation" for that same plan.
Same vendor, same plan, same week, two incompatible published limits. A buyer sizing a team against "Unlimited" is sizing against a number Otter contradicts on its own front page.
2026-09-09
Otter's security page states: "No customer data will be used to train or improve our AI Service Provider(s)' artificial intelligence models/algorithms."
That sentence is true and narrow: it covers third-party providers only. Otter's own privacy policy confirms Otter trains its proprietary models on de-identified recordings and transcriptions of the same data. The security page reads as a blanket no-training promise and is not one.
2026-09-09
The only opt-out from model training Otter publishes is automatic and Enterprise-only: "By default, Enterprise workspaces are opted out of AI model training."
No equivalent control is documented for Basic, Pro or Business. On the paid plans most individuals and small teams actually buy, the opt-out Otter advertises does not appear to exist.
2026-09-09
Otter's security page states its policies are "created based on the ISO 27001/2 framework".
Being based on a framework is not certification against it. Otter is not ISO 27001 certified, and comparison tables that render this claim as a certification are repeating something the vendor does not say.
2026-09-09
Read AI (3 findings) #
A meeting assistant sold across four tiers with both monthly and annual rates published, whose entire published compliance position is a HIPAA line on the most expensive tier.
Read AI sells HIPAA compliance as a capability of the product.
It is available only on Enterprise+, the top of four paid tiers, at $29.75/user/month billed annually or $39.75 billed monthly. The answer to "is Read AI HIPAA compliant" therefore depends on what the buyer pays. A clinic that needs HIPAA cannot buy any of the cheaper tiers, and the plans page is the only place this is stated.
2026-09-09
Read AI's plans page is the vendor's own side-by-side comparison of all four tiers, including what each one covers on security.
It names no SOC 2 report, no ISO 27001 certification, no GDPR position, no data residency region and no statement about model training. A single HIPAA line on the top tier is the entire published compliance position on the page where a buyer is asked to choose a plan.
2026-09-09
Read AI's pricing page advertises the Free tier as supporting "20+ languages".
That figure matches neither the 33 transcription languages nor the 8 fully supported output languages published in the help centre, and no page defines which set the "20+" refers to.
2026-09-09
Sembly (3 findings) #
A meeting assistant with published US and EU data residency and 48 languages, whose no-training commitment and SOC 2 coverage are both narrower than its home page states.
Sembly's home page states that "Sembly is SOC 2 Type II certified and Microsoft 365 certified".
Sembly's own pricing page marks SOC 2 as absent on Basic and on Pro, and present only on Max. A SOC 2 Type II attestation is a property of the organisation and its systems; it is not something a vendor can withhold from a customer who pays less. Either the plan table is wrong, or the attestation covers only part of the service and the home page overstates it. A buyer on the Pro plan cannot tell which, and the two pages are one click apart.
2026-09-02
Sembly publishes a commitment not to train AI models on customer meeting content.
The sentence is scoped in its own wording: Sembly "does not use Enterprise Plan customer meeting content, including audio, video, or transcripts, for AI model training". Basic, Pro and Max - every plan a buyer can purchase at a published price - are outside that commitment. Sembly is the only vendor tracked here that states the exclusion and limits it to one plan inside the same sentence, which at least makes the limit visible; the three vendors that scope their training sentence to Google Workspace API data do not.
2026-09-02
Sembly's Max plan carries HIPAA, custom SSO and audit logs.
Max also carries a three-seat minimum at $30/user/month billed annually, so the smallest purchase that includes an audit log or SSO is $90/month. The compliance features are not sold separately and do not appear on Basic or Pro at any price.
2026-09-02
Tactiq (4 findings) #
A browser-extension transcript capture tool for Google Meet, Zoom and Teams that stores text only - it does not record or keep meeting audio, which puts it in a different product category from the recorder-based tools it is usually compared against.
Tactiq's homepage states "No, OpenAI does not use data submitted via API to train OpenAI models or improve OpenAI's service offering." Its help centre states "No. Azure OpenAI will not use data submitted via their API to train or improve their models."
Two vendor pages name two different processors for the same guarantee. Whichever is current, both sentences are about what the model provider does - neither states whether Tactiq itself trains on customer transcripts, which is the question a buyer is actually asking.
2026-09-09
Tactiq answers the data-training question with the sentence "No, OpenAI does not use data submitted via API to train OpenAI models or improve OpenAI's service offering."
That sentence is about OpenAI, a subprocessor. It is not a statement about Tactiq. Nowhere on the home page or the pricing page does Tactiq say whether Tactiq itself uses meeting transcripts to train or improve its own models. A reader scanning for "does this vendor train on my data" finds a confident No that answers the question for somebody else's models. Tactiq is the fourth vendor tracked here whose only training sentence is scoped to something narrower than its own use of meeting content.
2026-09-09
Tactiq is marketed and compared as an AI note taker for Google Meet, Zoom and Teams, alongside recorder-based tools.
Tactiq states "Tactiq does not record or store the audio from your meetings" and that "The transcript is happening in real-time and saved as a text". There is no recording to replay, no audio to re-run through a better model later, and no video. A feature table that puts Tactiq in a column next to Fathom or Otter is comparing two different product categories, and the vendor's own page is where that becomes visible.
2026-09-09
Tactiq's privacy policy states a single fixed storage location: "Your data is transmitted securely over SSL and stored in Google Cloud".
The privacy center advertises "You control where your transcription is stored." No page reconciles the two, and none publishes what the choice set is.
2026-09-09