Tracker / Meeting notetaker

Does Fireflies.ai train on your meetings? Fireflies.ai admin guide

Fireflies says it does not train on your data by default and has a zero-day retention policy with its vendors. Enterprise ($39/seat/month, billed annually) adds SSO and SCIM, audit logs via the API, custom retention, HIPAA and private storage.

Vendor: Fireflies.ai · Last checked Oct 22, 2026 · 2 plans tracked

Plan by plan

Free / Pro / Business business

Trains on your data?
No “We don't train on it by default.” source ↗ checked Oct 22, 2026
Retention
While account active; deleted within 30 days of closure Zero Data Retention for meeting content at third-party vendors (not stored or used for training by them). source ↗ checked Oct 22, 2026
SSO
No SSO + SCIM is listed as an Enterprise addition (“Everything in Business, plus…”). source ↗ checked Oct 22, 2026
SCIM
No SSO + SCIM is listed as an Enterprise addition. source ↗ checked Oct 22, 2026
Audit logs
No Audit Logs (API) are listed as an Enterprise addition. source ↗ checked Oct 22, 2026
Data residency
Unknown Not verified from a vendor-owned source yet.
DPA
yes – self-serve signing Fireflies invites customers to sign its GDPR DPA online. source ↗ checked Oct 22, 2026

Enterprise enterprise

Trains on your data?
No source ↗ checked Oct 22, 2026
Retention
Custom data retention source ↗ checked Oct 22, 2026
SSO
Yes SSO + SCIM is listed under Enterprise. source ↗ checked Oct 22, 2026
SCIM
Yes source ↗ checked Oct 22, 2026
Audit logs
Yes Audit logs (API). source ↗ checked Oct 22, 2026
Data residency
Unknown Not verified from a vendor-owned source yet.
DPA
yes – self-serve signing Fireflies invites customers to sign its GDPR DPA online. source ↗ checked Oct 22, 2026

HIPAA BAA available on Enterprise with Private Storage.

How to block or allow Fireflies.ai

We haven't found a vendor-documented way to enforce this tool (tenant header, admin switch or MDM policy) yet. Your options are blocking the domains below at your secure web gateway or DNS filter, or using your browser-management policy (for example Chrome/Edge URLBlocklist).

Domains

“Primary domain only” means we haven't found a full endpoint list from the vendor, so blocking just this domain may not catch every API or desktop-app endpoint.

Change history

No changes recorded since our baseline snapshot on Oct 22, 2026.

Sources