Data

Fathom and the GDPR: AI training, data location and DPA

Team: Trains on your data unless you switch it off. EU hosting not documented · DPA on request.

Vendor: FathomMeetings and notesChecked on How we check

Verdict

Is Fathom GDPR compliant?

Team

Business

Trains on your data unless you switch it off

EU hosting not documented · DPA on request

Price: $15 / user / mo

No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.

Training

Does Fathom train on your data?

Trains on your data by default?

Checked

Trains on your data unless you switch it off.

Yes, in de-identified form, unless someone opts out: Fathom uses de-identified customer data to improve its own AI models; its AI providers (Anthropic, OpenAI, Google) may not train on it

Source: trust.fathom.videoFAQ 'Do you let AI providers train on customer data?'Second source: fathom.aiChecked on

Switch-off

How do you turn off AI training in Fathom?

How to switch training off

Checked

You can switch the training off.

Each user can opt out in User Settings (fathom.video/customize); on Team Edition an admin can opt out all users in Organization Settings

Source: trust.fathom.videoFAQ 'Do you let AI providers train on customer data?'Checked on

Location

Where does Fathom store your data?

Contract

Does Fathom sign a data processing agreement?

Data processing agreement (DPA)

Checked

DPA on request.

Yes. Fathom publishes a DPA (last updated 5 May 2026) that supplements its standard terms, and signs one for EU/UK customers on request via trust@fathom.video

Source: fathom.aiCover page ('supplemental to… the Fathom standard terms')Second source: trust.fathom.videoChecked on

Processors

Who else handles Fathom data?

Sub-processors (companies that handle the data for them)

Checked

30 listed.

Public. 30 entries, 29 in the US and 1 in Belgium; AI providers: Anthropic, OpenAI, ElevenLabs, Fireworks, Modal and Voyage AI; hosting on Google Cloud

Source: trust.fathom.videoSubprocessors list (all pages)Checked on

EU–US Data Privacy Framework

Checked

On the list.

Active (Fathom.video; EU-US DPF, Swiss-US DPF, UK Extension; non-HR data)

Source: dataprivacyframework.govSearch 'Fathom'Checked on

Retention

How long does Fathom keep your data?

How long data is kept

Checked

Recordings and data are kept indefinitely until the user deletes them or the account; after account deletion, backups are cleared within 7 more days. Custom retention rules (e.g. purge after 2 years) are offered on a higher Team Edition plan

Source: trust.fathom.videoFAQs 'How long do you store meeting recordings…' and 'What happens to my data if I delete my account?'Second source: fathom.aiChecked on

Security

Which certifications and admin controls does Fathom have?

Security certifications

Checked

SOC 2 Type II (report and bridge letter); HIPAA and GDPR listed

Source: trust.fathom.videoCompliance tiles and documentsChecked on

Admin controls for AI

Checked

Partly. Team admins can opt every user out of model training; other organisation-wide AI switches are not described

Source: trust.fathom.videoFAQ 'Do you let AI providers train on customer data?' (Organization Settings)Checked on

The vendor doesn't say: EU hosting, price.

Alternatives

Fathom alternatives that don't train on your data

Other meetings and notes tools whose business plan doesn't train on your data and includes a DPA.

The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.

Tool · PlanVerdictYour five rules
  • jamie

    Team · €33 / user / mo

    Doesn't train on your dataData in the EU by default · DPA on request

    ✓✓✓✓✓

  • Leexi

    Business · €39 / user / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • Noota

    Business · $39 / mo

    Doesn't train on your dataEU hosting available · DPA in the terms

    ✓✓✓✓✓

  • tl;dv

    Business (+1) · €29 / user / mo

    Doesn't train on your dataData in the EU by default · DPA in the terms

    ✓✓✓✓✓

  • Trint

    Advanced · See details

    Doesn't train on your dataEU hosting available · DPA on request

    ✓✓✓✓✓

If no plan gives you the training default or data location you need, the tool may not be the right fit. We design and build what your team is missing around your own rules, and keep it running after launch.

See what we build

Need something your tools can't do?

We design and build what your team is missing, around the way you already work and the data rules you set.

Book a callServices