GTM Trust Index

Fathom: security & AI-training scorecard

fathom.ai ↗ · AI notetaker · Last checked Oct 16, 2026

Does Fathom train AI on customer data?

Opt-out
“Based on how you configure your account settings, we may use and create de-identified data generated from Meeting Content Information to improve our Service by training, improving, and customizing our in-house artificial intelligence models. You can opt out from this use of your data in your account settings.”

SOC 2

Independent audit of security controls. Type II covers operating effectiveness over a period.

Confirmed

Type II

“SOC 2 Type II”

ISO/IEC 27001

Certified information security management system.

No

No

“We don’t have ISO27001, but we do have SOC2, which is similar!”

HIPAA / BAA

Whether the vendor will sign a Business Associate Agreement for PHI.

Partial / unclear

HIPAA compliance claimed; BAA not confirmed

“Fathom is HIPAA, SOC2 Type II, and GDPR-compliant”

GDPR DPA

Data Processing Agreement/Addendum for personal data.

Confirmed

DPA available

“we are GDPR compliant and are happy to sign a DPA”

Trains AI on customer data

Whether the vendor says it uses customer data to train AI models.

Opt-out

Opt-out

“Based on how you configure your account settings, we may use and create de-identified data generated from Meeting Content Information to improve our Service by training, improving, and customizing our in-house artificial intelligence models. You can opt out from this use of your data in your account settings.”

Data retention

What the vendor publishes about how long customer data is kept.

Published

On account deletion: data removed, backups purged after 7 more days

“When you delete your account, all recording data and metadata are removed. After an additional 7 days, all data is also removed from our backups.”

Subprocessor list

Where the vendor lists third parties that process customer data.

trust.fathom.video ↗

Trust center

The vendor's security/trust portal.

trust.fathom.video ↗

All sources checked (4)

Fetched on Oct 16, 2026. Vendor pages can change after this date.

Is this wrong? / Claim this listing

Vendors and readers can send evidence links. Nothing is published without a source.

Send a correction

Informational only, not legal advice or an audit. Summaries reflect Fathom's published pages as of Oct 16, 2026; verify with the vendor. Methodology & disclaimer.