Privacy first. Security always.
We never sell your data. Your data is always in your control. You decide whether data can be used to train or improve our models, and Flow is independently certified to the world's top security standards: SOC 2 Type II, ISO 27001, and HIPAA.
Trusted by teams who put security first:
.svg)
Privacy built-in
We never sell your data. Your data is always in your control. You decide whether data can be used to train or improve our models.
We put our security to the test with live, independent auditing.
SOC 2 Type II Compliance
Audited against rigorous trust principles for security, availability, and confidentiality. Available to Enterprise plans only.
HIPAA Compliance
Built to protect sensitive health data. Available on all plans with the acceptance of a Business Associate Agreement (BAA).
.png)
ISO 27001
International framework for managing and improving information security. Available to Enterprise plans only.
Bug Bounty Program
We welcome responsible security research. If you discover a vulnerability in Wispr Flow, we offer rewards up to $5,000+ for critical findings — and legal safe harbor for researchers who follow our disclosure policy.
Frequently asked questions
What is “Improve the model for everyone”?
It lets you choose whether Wispr may use your Dictation data—audio, transcripts, and edits—to evaluate, train, or improve AI models. Manage this in Settings > Data and Privacy.
How is my data stored?
Dictation Cloud Storage controls whether Wispr stores Dictation transcripts, audio, and dictation history on its servers for persistent, cross-device features. Notetaker transcripts are stored in Wispr’s private cloud for cross-device syncing and meeting resumption; you can configure Notetaker transcript retention in Settings > Data and Privacy.
Does Wispr sell or share my data?
We never sell your data. Our business model is based on selling software, not your information. You own your data.
How can I enable HIPAA compliance?
If you are an individual user, open the app, go to Settings > Data and Privacy, then view and accept the Business Associate Agreement (BAA).
If you are an Enterprise user, you can go to your admin portal and accept the BAA on behalf of your entire organization and enforce HIPAA compliance across your whole team. Watch this video to see how to enable it.
What security certifications do you have?
We are SOC 2 Type II certified, which means our security, availability, and privacy practices have been independently audited to meet rigorous industry standards. You can check our live compliance report at any time here.
Where is my data stored and how is it protected?
Your data is encrypted in transit (while it’s moving) and at rest (while it’s stored). We use secure cloud servers and limit access to authorized personnel only. Transcription always happens in the cloud to provide the best speed and accuracy.
Does Wispr Flow support Single Sign-On (SSO)?
Yes. Enterprise plans include SSO/SAML integration so your team can securely access Wispr Flow with your organization’s existing identity provider.
Start flowing
Effortless voice dictation in every application.
