Blog · Law

The Otter.ai ruling, explained: when a notetaker's vendor counts as a third party

On 13 August 2026 a federal judge let wiretap claims against Otter.ai go forward. The reasoning is narrow and it matters to every product that records conversations: a vendor that uses recordings for its own purposes may not be “just a tool”.

10 October 2026 · 2 min read · Soham Mitra

What happened

In re Otter.AI Privacy Litigation consolidates four suits against Otter.ai, the first filed on 15 August 2025. The plaintiffs allege that Otter's meeting assistant recorded people who never agreed to it, including people without Otter accounts, and that Otter used those recordings to train its own models. Otter moved to dismiss. On 13 August 2026 Judge Eumi K. Lee granted the motion in part and denied it in part.

That is a ruling on whether the complaint states a claim. The court took the allegations as true for that purpose. It did not find that Otter broke any law, and Otter has not been found liable for anything.

What survived and what did not

The reasoning that matters

Wiretap law generally lets a party to a conversation record it. A tool the party uses, such as a tape recorder, is treated as an extension of that party, not as an eavesdropper. The question was whether Otter is that kind of tool.

The court said a vendor that is only an extension of its user is not a third party. But Otter plausibly is one, because it allegedly “independently collects, retains, and uses communications for its own commercial purposes”, model training included. The line the court drew is about what the vendor does with the recording, not about whether a bot joined the call.

Bot-free is not the answer by itself

Several notetakers now capture audio on the user's computer instead of sending a bot into the meeting. That changes what other people see. It does not change where the audio goes afterwards. A class action filed on 30 July 2026 against Granola, a bot-free notetaker, alleges capture without participants' consent and default use of meeting data for training. A separate suit against Fireflies alleges that voiceprints were collected from participants who had no account. These are allegations, and the companies dispute them.

What we take from it

• Consent is still the user's job. No product design removes the need to tell people and, where the law requires it, get their agreement. Our consent guide covers the main rules.
• What the vendor does with the audio is the exposure. Vlocalhost transcribes and writes notes on the user's own computer. We do not receive the recordings, so there is nothing for us to retain or train on. Our audit of the installed build shows how we checked that.
• Watch the case. It is at the pleadings stage. Discovery, class certification and any trial are still ahead, and the law may look different when it ends.

This post explains a court decision. It is not legal advice.