# Fireflies.ai ## Kurzbeschreibung **“The #1 AI Assistant for Your Meetings”** Fireflies.ai is an AI meeting assistant that automatically transcribes, summarizes, searches, and analyzes meetings. The tool supports video conferencing systems, audio/video uploads, meeting search, AskFred, a mobile app, a Chrome extension, an API, conversation intelligence, AI skills, and integrations with CRM, collaboration, and storage tools. ## Claim The #1 AI Assistant For Your Meetings ## Geeignet für - API Integration - Audio / Voice - Automation / Workflows - Education - Data Extraction / Document Analysis - Email / Communication - Customer Service & Chatbots - Productivity & Planning - Project Management - Texts / Content - Sales / Sales ## Kernfunktionen - Meeting Minutes - Transcription - Summary ## Preismodell - **free:** Free entry with limited transcription, limited storage, AskFred, audio/video file upload, mobile app, Chrome extension and API access according to the pricing page. - **subscription:** **Pro **For professionals and small teams; includes unlimited transcription, unlimited AI summaries, increased storage, downloads of transcripts/summaries/recordings, Personal Assistant, talk-time analytics, AI skills, voice agents, AI credits, action items, task manager, and unlimited integrations. **Business** For growing businesses; includes Pro features plus unlimited storage, video recording, multi-language mode, conversation intelligence, team analytics, more AI credits, and user groups. **Enterprise** For large enterprises; includes Business features plus Rules Engine, SSO, SCIM, HIPAA compliance, private storage, custom data retention, Transcript+Summary-only mode, more AI credits, Super Admin, and a dedicated account manager. - **other:** **API** Fireflies provides API access for processing audio files and integrating them into your own workflows. **Private Storage** Enterprise option for storing meeting data in a preferred location or dedicated storage environment. **AI Credits / AI Skills** AI Credits control the use of specific AI features; AI Skills automatically extract follow-ups, scores, insights, and structured meeting data. ## DSGVO und Datenschutz **Gesamteinschätzung:** Conditional **On-prem / local hosting: indirect / not available** The website does not mention an on-premises installation or a full installation running locally on the customer’s own infrastructure. It only describes “Private Storage” with a customer-owned storage bucket, while processing remains on Fireflies servers in the U.S. **Private Cloud / Data Center: Partially** The website describes “Private Storage”—that is, dedicated and isolated storage—as well as BYOS on AWS S3 or Google Cloud Storage. This improves control over the storage location but does not replace fully isolated private processing, as processing continues to take place in the U.S. **EU SaaS / Managed: Partially** A self-hosted SaaS service exists, but according to the website, the standard version stores and processes data in the U.S. EU storage is only possible via “Private Storage” and even then without EU processing. Full EU data residency for the managed service is not specified on the website. **Hybrid: Covered** The website effectively describes a hybrid model via “Private Storage”: storage in a customer-controlled bucket—which can also be located in the EU—with simultaneous processing on Fireflies servers in the U.S. **DPA / AVV: Covered** A DPA/AVV is publicly available. It governs processing only upon the customer’s instructions, support for data subjects’ rights, deletion/return, audits, subprocessor obligations, and international data transfers via the Data Privacy Framework and SCCs. **No training: covered** The website explicitly states that personal data and meeting content are not used for AI model training and that third-party providers are contractually prohibited from doing so. Additionally, a “zero-day retention policy” for meeting content with third-party providers is described. **Open Source / Transparency: Indirect / Not Available** Open-source components, open models, or self-hostable parts are not specified on the website. While data export/download and, in some cases, customer-owned storage are positively documented, there is no true open-source/transparency path. **Data Processing** The website describes storage and processing in the U.S. on AWS and GCP for standard use. For Enterprise, there is “Private Storage” or BYOS with dedicated/isolated storage; while data storage may be located in the EU, processing still takes place on Fireflies servers in the U.S., according to the website. The website does not specify an EU-only processing path or full self-hosting. **Conclusion** For EU/EEA users, Fireflies.ai offers some important data protection features, but no fully European hosting or processing path is documented on the website. The most likely scenario is *conditional* GDPR compliance via a DPA, SCCs/Data Privacy Framework, and optional EU storage in an enterprise setup. Those who require strict EU/EEA data residency—including for processing—or true control over the runtime environment will find no sufficient evidence of this on the website. **Sources** - [https://fireflies.ai/privacy-policy](https://fireflies.ai/privacy-policy) - [https://fireflies.ai/data-processing-agreement](https://fireflies.ai/data-processing-agreement) - [https://fireflies.ai/security](https://fireflies.ai/security) - [https://guide.fireflies.ai/articles/9596505232-learn-about-data-storage-and-transfer](https://guide.fireflies.ai/articles/9596505232-learn-about-data-storage-and-transfer) - [https://guide.fireflies.ai/articles/3687416644-learn-about-private-storage](https://guide.fireflies.ai/articles/3687416644-learn-about-private-storage) For users in the EU/EEA, compliance with the GDPR is only **partially** plausible. Positive aspects include a publicly available DPA, provisions regarding EU Standard Contractual Clauses, participation in the EU-U.S. Data Privacy Framework, documented data subject rights, and the statement that meeting content and personal data are not used for AI training. At the same time, the website states that the standard cloud stores and processes data in the U.S. Even with “Private Storage,” while data may be stored in the EU, the website indicates that processing still takes place in the U.S. The website does not specify any true EU/EEA data processing without U.S. processing or an on-premises/self-hosting option. **Positive** Existing DPA/AVV with binding instructions, SCCs as a fallback, EU-US Data Privacy Framework, documented support for data subject requests, subprocessor provisions with the right to object, statements regarding “no AI training” and “zero data retention” by third-party providers, as well as documented security and compliance certifications such as SOC 2 Type II and GDPR. **Negative** The website clearly states that the default is U.S. hosting and U.S. processing. Even with private storage in the EU, processing continues to take place in the U.S., according to the website. Full EU/EEA data residency for processing, an EU data center for the entire solution, or a self-hostable/on-premises option are not specified on the website. The provider’s ISO 27001 certification is not listed on the website. **Server Location** By default, according to the website, data is stored and processed in Fireflies’ secure cloud infrastructure in the U.S. on AWS and GCP. With “Private Storage,” data can also be stored in a customer-owned bucket in the EU; however, according to the website, processing still takes place in the U.S. ## Hosting und Daten - **On-Prem / lokales Hosting:** unknown - **Private Cloud / Rechenzentrum:** teilweise / indirekt - **EU SaaS / Managed:** teilweise / indirekt - **Hybrid:** abgedeckt - **AVV / DPA:** abgedeckt - **Kein Training auf Kundendaten:** abgedeckt - **Open-Source / Transparenz-Pfad:** unknown ## Standort **Land:** USA **Taxonomie:** USA Fireflies.ai Corp, 1000 Brickell Ave, Ste 715 PMB 5136, Miami, FL 33131, USA ## Vorteile - Very broad meeting feature set - Transcription in 100+ languages according to pricing - Unlimited transcription already in the free/pro/business context, with plan-dependent memory/feature limits - API access already included in the Free plan - DPA publicly signable - SOC 2 Type II, GDPR, HIPAA/BAA path and Enterprise Private Storage documented - No training on meeting content according to security documentation ## Nachteile - US provider; standard cloud stores and processes data in the USA at AWS/GCP - Private storage is enterprise-only; even with EU storage, data is processed in the USA according to Fireflies - Meeting bots pose high data protection and consent risks - Complete subprocessor list in the Trust Center is access-restricted or not freely readable - Conversation intelligence, sentiment analysis and analysis functions can be particularly sensitive in HR/employee contexts ## Quellen - Offizielle Website: https://fireflies.ai/ ## Letzter Datenstand 2026-05-28 ## Originalseite https://kifox.ai/en/ki-tools/fireflies-ai-en/