Fireflies.ai: security & AI-training scorecard
fireflies.ai ↗ · AI notetaker · Last checked Oct 16, 2026
Does Fireflies.ai train AI on customer data?
No“We do not use personal information for AI model training and we contractually prohibit our vendors from using this information for their own model training.”
Note: Security page wording is qualified: "We don’t train on it by default unlike other AI companies."
SOC 2
Independent audit of security controls. Type II covers operating effectiveness over a period.
Type II
“Certified for GDPR, SOC 2 Type II, and HIPAA compliance”
ISO/IEC 27001
Certified information security management system.
Not verified from vendor-owned sources
Note: Not mentioned on fetched pages.
No vendor source found as of check date.
HIPAA / BAA
Whether the vendor will sign a Business Associate Agreement for PHI.
HIPAA compliance claimed; BAA not confirmed
“Certified for GDPR, SOC 2 Type II, and HIPAA compliance”
GDPR DPA
Data Processing Agreement/Addendum for personal data.
DPA available (self-serve signing page)
“This Privacy Policy does not apply to User Content we process on behalf of our business customers, which is governed by our Terms of Service , Data Processing Agreement , and other applicable agreements”
Trains AI on customer data
Whether the vendor says it uses customer data to train AI models.
No
“We do not use personal information for AI model training and we contractually prohibit our vendors from using this information for their own model training.”
Note: Security page wording is qualified: "We don’t train on it by default unlike other AI companies."
Data retention
What the vendor publishes about how long customer data is kept.
Not verified from vendor-owned sources
Note: Security page cites a '0-day data retention policy with all vendors and partners' (third-party vendors), not Fireflies' own retention period.
No vendor source found as of check date.
Subprocessor list
Where the vendor lists third parties that process customer data.
Not verified from vendor-owned sources
Note: Trust center did not render for verification.
No vendor source found as of check date.
Trust center
The vendor's security/trust portal.
Note: Page title 'Fireflies Trust Center' verified; content did not render.
All sources checked (4)
Fetched on Oct 16, 2026. Vendor pages can change after this date.
Is this wrong? / Claim this listing
Vendors and readers can send evidence links. Nothing is published without a source.
Informational only, not legal advice or an audit. Summaries reflect Fireflies.ai's published pages as of Oct 16, 2026; verify with the vendor. Methodology & disclaimer.