Notetaker for Enterprise: FAQ

Last updated: August 28, 2026

Available on: Mac

Answers to the security, compliance, plan, and admin-control questions organizations ask before rolling out Notetaker — including the data-policy settings admins can enforce org-wide.

Enterprise data-policy controls

Set these in the admin portal under Settings → Organization. All four require an Enterprise plan and an admin role.

Control

Default

What it does

Local data storage

Managed individually

Sets the minimum strictness for dictation storage: Managed individually, Auto-delete local data every 24 hours, or Never store data locally.

Cloud data storage

Managed individually

Set to Managed individually or Never store data in cloud.

Context awareness

Available

Can be disabled for all users org-wide.

Model training

Off for everyone (Enterprise) / Managed individually (other plans)

Read-only on Enterprise, showing Off for everyone.

How these controls interact with member settings

Members may choose a setting equally strict or stricter than the retention floor, never looser. Never store data locally removes member choice entirely.

Model-training and storage restrictions override the cloud storage setting for all members.

Below Enterprise, the controls for Local data storage, Cloud data storage, Context awareness, SSO / SAML Authentication, SCIM, SOC 2, and Require consent confirmation are disabled, with the tooltip "Upgrade to Enterprise plan to modify this". Model training shows Managed individually with an inline upgrade prompt, and Org-wide HIPAA shows a grayed-out View and accept BAA button.

These controls apply to desktop dictation only — not to Notetaker or the mobile app.

Other organization settings

  • Enforce SSO for all members — Enterprise only; default off.

  • Auto-invite by company email domain — Default off. With one linked domain, the domain name is shown; with none, the portal reads "Your organization is not linked to a domain. Please contact us at enterprise@wispr.ai to make changes."

  • Disable free trial for new members — Requires an active subscription. Confirming removes existing members' active trials and cannot be undone.

  • Hide leaderboard — Default off; available below Enterprise.

  • Organization name — Editable field.

  • SOC 2 — Enterprise only; links to https://trust.wispr.ai.

What members see when an org policy blocks them

One of four gate modals appears, depending on the policy and the member's role:

  • Org HIPAA (admin): Manage in Admin Portal opens https://admin.wisprflow.ai/app/settings/organization.

  • Org cloud sync disabled (admin): Turn on Private Cloud Sync opens the same Admin Portal page.

  • Non-admin member: Request access logs the request and shows "Access requested". It does not email the admin.

  • Individually-signed HIPAA BAA: View signed BAA and Revoke BAA.

Locked settings are labeled "Some options are restricted by your organization.", "This setting is managed by your organization.", "Set by your admin.", or "Dictation Cloud Storage is locked off because HIPAA BAA is signed."

FAQs

Security and compliance

Is Notetaker HIPAA-compliant? Can we use it under our BAA?

Not yet. A HIPAA-compliant version is in development; dictation and the rest of Wispr Flow remain available.

The org HIPAA tooltip reads: "With HIPAA enabled, Notetaker and Scratchpad features will be disabled. Note that this blocks access to cross-device features."

A signed BAA displays "BAA signed by {name} on {date}". Revoke BAA appears only when the relevant feature is enabled for your organization; otherwise admins see only View signed BAA.

What happens to our meeting audio and transcripts?

Wispr does not use customer content to train AI models without consent. Transcript retention and deletion controls are in Notetaker settings; enterprise-level retention controls are in development.

What security certifications and admin controls are in place?

Wispr Enterprise includes SOC 2 Type II, ISO 27001, and a HIPAA-ready BAA, plus SAML SSO at no extra charge, SCIM, audit logs, MDM support, domain management, and free IT admin seats.

The SOC 2 Type II report, DPA, and related documentation are available through the Wispr Trust Center at https://trust.wispr.ai.

Will meeting participants be notified that Notetaker is recording?

No. Notetaker captures audio on your device instead of joining the call as a visible bot, so participants see no "joined the meeting" notice. Tell participants before you record or transcribe any video call, in-person meeting, or phone call.

Recording and consent laws vary by state and country; check with your legal team if you are unsure what applies.

Plans and pricing

Which plans include Notetaker?

On the admin portal's Billing page, admins may see a dictation-only option and a bundle option. Enterprise organizations should contact sales.

Limitations and notes

  • Availability: Notetaker is currently limited to Mac.

  • Participant notice: Notetaker does not automatically notify participants that a conversation is being recorded or transcribed.

  • Dictation unaffected: The local data storage control in Settings → Data and Privacy applies to desktop dictation only — not to Notetaker or the mobile app.

  • Personal HIPAA BAA: Signing a personal HIPAA BAA in-app locks dictation cloud storage off and sets Improve the model for everyone to Disabled for that account, overriding org settings that would otherwise allow either. The signing dialog warns the action cannot be undone, but Revoke BAA is available in the Private Cloud Sync gate modal and in Settings → Data and Privacy; on success it shows "HIPAA BAA revoked successfully" and restores the ability to enable cloud storage.