Privacy policy (names the operating company) — Noota

Cited by

Facts read from this source

• Entity Report an error

  “Noota is operated by NOOTA SAS, a French simplified joint-stock company registered with the Toulouse Trade and Companies Register under number 888 965 951, with its registered office at 13 rue Sainte Ursule, 31000 Toulouse, France.”

• AI no training Report an error

  “We never train AI models on your data. Recordings, transcripts, notes and summaries are never used to train Noota's models or any third-party model, on any plan, including Free.”

• Regions Report an error

  “Your meeting data is hosted in the EU. We use Google Cloud in Belgium and the Netherlands, or Scaleway in Paris with our sovereign option.”

• Deletion SLA Report an error

  “Deleted meetings are erased from production and backups in under 24 hours.”

• Enterprise retention range Report an error

  “Enterprise admins set retention from 1 day to 3 years.”

• Encryption Report an error

  “Your data is encrypted at rest (AES-256) and in transit (TLS 1.2+).”

• ISO 27001 Report an error

  “Noota is ISO 27001 certified.”

• Roles Report an error

  “Processor, for meeting content: audio, video, transcripts, notes, summaries, AI outputs, participant names and voices, uploaded files, connected emails and calendar events.”

• DPA availability Report an error

  “Our Data Processing Agreement governs this processing and is available on request in our Trust Center (trust.noota.io).”

• No sale Report an error

  “We do not sell personal data, and we do not share it with third parties for their own marketing.”

• AI providers standard Report an error

  “In the standard environment, frontier models (such as Anthropic Claude, Google Gemini and Mistral) are accessed only through Google Cloud Vertex AI in the EU, never through consumer APIs. Transcription is performed by Gladia in Europe.”

• AI providers sovereign Report an error

  “In the sovereign environment, AI processing uses Mistral AI and open-weight models hosted in France.”

• AI zero retention Report an error

  “Our AI providers are contractually bound to zero data retention: they process content only to return a result, then discard it, and may not use it for their own purposes.”

• Staff access Report an error

  “Noota staff do not read your meeting content. Support can access it only if you explicitly share a dedicated access identifier with them, for the time needed to solve your request.”

• Google API limited use Report an error

  “Noota's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.”

• Sovereign option Report an error

  “The sovereign environment is designed for public sector and regulated organisations. Contact sales to activate it.”

• International transfers Report an error

  “Such transfers rely on the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework, with additional safeguards where needed. In the sovereign environment, no data is transferred outside the EU.”

• Retention free plan Report an error

  “Meeting content on the Free plan: archived after 30 days.”

• Retention account closure Report an error

  “Account closure or end of contract: meeting content deleted in under 24 hours; account data deleted within 30 days.”

• Retention billing Report an error

  “Billing and invoices: 10 years (French Commercial Code).”

• Backup policy Report an error

  “Backups: metadata backed up every 4 hours and kept 1 year at most. Audio and transcripts are excluded from routine backups unless agreed by contract.”

• SOC 2 Report an error

  “ISO 27001 certified; SOC 2 Type II audit in progress; annual independent penetration tests; internal audits every six months.”

• SSO SAML Report an error

  “Access control: owner, admin and member roles; SSO and SAML on Enterprise; mandatory MFA for Noota staff; least-privilege access to production.”

• Breach notification Report an error

  “if a breach affects your data, we notify affected customers without undue delay, in line with the GDPR and the DPA.”

• Recording consent notice Report an error

  “Participants are automatically told that the meeting is recorded.”

• Text only mode Report an error

  “A text-only mode keeps the transcript without storing audio or video.”

• AI feature toggle Report an error

  “Customers can turn off specific AI features, such as sentiment analysis, for their organisation.”

• DPA response time Report an error

  “Questions or requests: dpo@noota.io. We answer within 30 days at most.”

• Rights response time Report an error

  “We answer within one month, extendable by two months for complex requests.”

• Cnil complaint Report an error

  “You may lodge a complaint with the French data protection authority, the CNIL (cnil.fr), 3 place de Fontenoy, 75007 Paris.”

• Policy change notice Report an error

  “We will notify customers by email and in the app at least 30 days before any material change takes effect.”

• Connected services Report an error

  “calendar events, emails, CRM or ATS records you choose to sync through an integration (Google Workspace, Microsoft 365, Salesforce, HubSpot and others).”

• Payment card handling Report an error

  “Card details are handled by our payment provider; Noota never stores them.”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Management Consultant Recording, transcription & languages
• The Management Consultant Consent, participant rights & works council
• The Management Consultant Retention, AI training & administration
• The Management Consultant European sovereignty
• The Data Protection Officer Recording, transcription & languages
• The Data Protection Officer Consent, participant rights & works council
• The Data Protection Officer Retention, AI training & administration
• The Data Protection Officer European sovereignty
• The IT Lead Recording, transcription & languages
• The IT Lead Summaries, action items & meeting knowledge
• The IT Lead Consent, participant rights & works council
• The IT Lead Retention, AI training & administration
• The IT Lead European sovereignty
• The Sales Team Lead Recording, transcription & languages
• The Sales Team Lead Consent, participant rights & works council
• The Sales Team Lead Retention, AI training & administration
• The Sales Team Lead European sovereignty
• The Skeptic Recording, transcription & languages
• The Skeptic Summaries, action items & meeting knowledge
• The Skeptic Consent, participant rights & works council
• The Skeptic Retention, AI training & administration
• The Skeptic European sovereignty
• The Works Council Chair Recording, transcription & languages
• The Works Council Chair Integrations, API & workflow
• The Works Council Chair Consent, participant rights & works council
• The Works Council Chair Retention, AI training & administration
• The Works Council Chair European sovereignty