Privacy first. Security always.
We never sell or share your data. Privacy Mode ensures no dictation is stored on our servers, and Flow is independently certified to the world's top security standards: SOC 2 Type II, ISO 27001, and HIPAA.
Trusted by teams who put security first:
.svg)
Privacy built-in
With Privacy Mode enabled, zero dictation data is stored on our servers. To enable it, go to Settings → Data & Privacy → Privacy Mode.
We put our security to the test with live, independent auditing.
SOC 2 Type II Compliance
Audited against rigorous trust principles for security, availability, and confidentiality. Available to Enterprise plans only.
HIPAA Compliance
Built to protect sensitive health data. Available on all plans with the acceptance of a Business Associate Agreement (BAA).
.png)
ISO 27001
International framework for managing and improving information security. Available to Enterprise plans only.
Bug Bounty Program
We welcome responsible security research. If you discover a vulnerability in Wispr Flow, we offer rewards up to $5,000+ for critical findings — and legal safe harbor for researchers who follow our disclosure policy.
Frequently asked questions
What is Privacy Mode?
Privacy Mode controls whether your dictation data is used for AI model training. When enabled, none of your dictation data (audio, transcripts, edits) is used by Wispr or any third party to evaluate, train, or improve AI models.
What is Cloud Sync?
Cloud Sync controls whether Wispr stores your transcription data on our servers. When disabled, audio and transcripts are processed in real time and discarded after each request. Cross-device sync for Wispr Scratchpad will not be available.
What does zero data retention mean?
Enable Privacy Mode and disable Cloud Sync for zero data retention. This means no dictation data used for training, and no audio or transcripts stored on our servers.
Do you store my voice recordings or transcripts?
You can choose whether or not we store your dictation data. If you turn on Privacy Mode, we keep nothing—no audio, no transcripts, no edits. Without Privacy Mode, your data may be used to improve Flow’s features and AI models, but it’s never sold or shared.
How can I enable HIPAA compliance?
If you are an individual user, open the app, go to Settings > Data and Privacy, then view and accept the Business Associate Agreement (BAA).
If you are an Enterprise user, you can go to your admin portal and accept the BAA on behalf of your entire organization and enforce HIPAA compliance across your whole team. Watch this video to see how to enable it.
What security certifications do you have?
We are SOC 2 Type II certified, which means our security, availability, and privacy practices have been independently audited to meet rigorous industry standards. You can check our live compliance report at any time here.
Where is my data stored and how is it protected?
Your data is encrypted in transit (while it’s moving) and at rest (while it’s stored). We use secure cloud servers and limit access to authorized personnel only. Transcription always happens in the cloud to provide the best speed and accuracy.
Does Wispr Flow support Single Sign-On (SSO)?
Yes. Enterprise plans include SSO/SAML integration so your team can securely access Wispr Flow with your organization’s existing identity provider.
Start flowing
Effortless voice dictation in every application:
4x faster than typing, AI commands and auto-edits.
Free for 14 days.
