Does Otter.ai keep data in Australia?

Otter uses AWS services for its data storage in the AWS region West, United States.

Note: The subprocessors page (effective 31 March 2026) lists Amazon Web Services, Inc. as the core infrastructure subprocessor for "Cloud service provider and customer data storage platform" with Entity Country "United States". The privacy policy also names "Amazon Web Services, based in the United States" for compute and data storage. No Australian data hosting option is published.

Cloud service providers who we rely on for compute and data storage, including Amazon Web Services, based in the United States.

Note: The privacy policy names AWS in the United States for compute. The subprocessors page (otter.ai/subprocessors) lists Anthropic ("Provider for backend support of AI-enabled functionality") with Entity Country "United States", and OpenAI (evaluating LLM effectiveness / harmful-content checks) also with "United States"; it says no Customer Data is used to train or improve their models and that they do not store Customer Data sent through the API. Enterprise workspaces are opted out of Otter's own model training by default (Enterprise Admin Controls Overview, updated 22 October 2026); that does not move processing into Australia. No Australian processing option is published.

The subprocessor only has access to Customer Data in the course of customer-initiated support cases.

Note: The subprocessors table lists Crescendo's Entity Country as "United States / Philippines / Honduras". Zendesk and Intercom are also listed for support services in the United States. The privacy-security page says Otter requires explicit customer consent before Otter employees or customer support access a transcript or recording to troubleshoot. No Australia-only support option is published.

Otter uses AWS services for its data storage in the AWS region West, United States.

Note: No plan or add-on offering Australian data hosting is published. Enterprise adds SSO, SCIM, retention, HIPAA configuration and default opt-out from Otter model training, but hosting remains in the United States.

The vendor does not publish a statement on this.

Note: Otter publishes no Australian residency option, so there is no exclusions list for an AU setting. Data that leaves the customer's control still includes AI providers (Anthropic, OpenAI), cloud providers (AWS, GCP, Crusoe), support (Zendesk, Intercom, Crescendo), billing (Stripe, Zuora) and engagement tools (OneSignal, PlanHat, On24), all listed with United States (or US / Philippines / Honduras for Crescendo) as the entity country.

The vendor does not publish a statement on this.

Note: The Privacy & Security page lists SOC 2 Type 2, GDPR, CCPA, VPAT and HIPAA. IRAP is not mentioned. The page says security policies are based on the ISO 27001/2 framework; that is not an IRAP assessment.