Fireflies.ai Review for Lawyers: What the Confidentiality Lens Reveals
Fireflies.ai is one of the most widely adopted meeting notetakers on the market, and lawyers keep asking a version of the same question: is it safe to point at a client call. This review answers that on the merits — what Fireflies actually does well, and where its architecture creates confidentiality tradeoffs you should understand before the bot joins your next Zoom.
Disclosure: Basil, which publishes this review library, competes with Fireflies.ai in the meeting-notetaker category. Basil is a fully on-device notetaker; Fireflies is a cloud service. That is a real architectural difference and I will name it where relevant, but I have tried to review Fireflies on what it is, not on what Basil is. If you want the on-device alternative, see Basil for Law.
What Fireflies.ai Actually Does
Fireflies is a cloud-based AI notetaker that joins meetings on Zoom, Google Meet, Microsoft Teams, and Webex through a bot named Fred, records audio, produces a transcript, and generates summaries, action items, and searchable topics. It also supports mobile capture and uploaded audio files. According to the vendor, transcripts and summaries flow into a searchable "Conversation Intelligence" workspace and can be pushed into CRMs, task tools, Slack, and document systems via native integrations. See the product overview and integrations directory.
The features lawyers tend to like: speaker separation, a decent keyword-based search across the transcript library, AI "AskFred" queries that summarize across meetings, and clip-and-share tooling for isolating a specific exchange. For business-development and internal team calls, it is genuinely useful.
The Confidentiality Lens
This is the section that matters for a practicing lawyer. When your client speaks into Zoom and the Fireflies bot is present, here is where the content goes and who could reach it.
Cloud processing. Fireflies is not on-device. Audio is transmitted to Fireflies' cloud, transcribed there, stored there, and processed there. The vendor's Privacy Policy and security page describe encryption in transit and at rest and SOC 2 Type II compliance. Those are reasonable baseline controls, but they do not change the fundamental fact: a third party is holding the recording and transcript of your client conversation.
Retention. Storage is indefinite by default until you delete. Paid plans offer configurable retention and administrative deletion. Confirm current retention controls on Fireflies' security page linked above before you rely on any particular window.
Model training. Fireflies' policies indicate that customer data is not used to train third-party foundation models, and business/enterprise customers can opt out of Fireflies' own model-improvement use. If this matters to you — and for privileged content it should — read the current terms carefully and get the opt-out in writing before onboarding.
DPA and BAA. Fireflies offers a Data Processing Addendum for GDPR-facing customers. It does not, as of writing, broadly market itself as HIPAA-ready, and I have not seen a standard BAA on offer for general customers. If you handle PHI in intake or matter calls, treat that as a hard blocker until the vendor confirms otherwise in writing.
Subpoena exposure — the part most lawyers miss. Because Fireflies holds the audio and transcript on its own infrastructure, a subpoena or search warrant served on Fireflies (not on you, not on your client) can potentially reach that content. That is not a criticism unique to Fireflies; it is true of every cloud notetaker. But it is the specific fact that changes your privilege analysis. The Southern District of New York's US v. Heppner (Feb 2026, Rakoff, J.) held that a litigant's chats with a public AI platform were not privileged. The court's reasoning — voluntary disclosure to a third-party service provider outside the privileged circle — is directly relevant when you invite a cloud notetaker into a client call. And in Brewer v. Otter.ai (2025), a putative class action, plaintiffs alleged a competing cloud notetaker recorded meetings without proper consent — a reminder that the vendor's own practices become part of your risk surface.
Consent and wiretap risk. Fireflies' bot appears in the participant list as "Fred" or similar, which helps with two-party-consent states, but the burden to obtain informed consent from every participant remains on you. See West Technology Group v. Sundstrom (D. Conn. 2024) for how courts treat consent questions in the recording context.
Ethics-Opinion Fit (ABA 512)
ABA Formal Opinion 512 (July 2024) tells lawyers using generative AI to (1) develop competence in the tool, (2) protect client confidentiality under Model Rule 1.6, (3) get informed client consent where the tool involves disclosure of client information to a third party, (4) supervise the output, and (5) consider fees. NYC Bar Formal Opinion 2025-6 (Dec 2025) is broadly consistent and adds granularity on vendor diligence.
How Fireflies maps against 512:
- Competence: Achievable. The UI is straightforward. Admins should walk through retention, sharing defaults, and who in the workspace can see which meetings.
- Confidentiality (Rule 1.6): This is the pressure point. Because Fireflies is cloud-hosted, client content leaves your custody. Reasonable safeguards under 1.6 comment [18] require you to evaluate the vendor's practices, negotiate protections, and, in many cases, obtain informed client consent before using it on privileged calls.
- Informed consent: Opinion 512 pushes toward informed consent when a client's information is shared with a self-learning or third-party AI tool. Assume you need it in writing for material matters.
- Supervision: Fireflies' summaries are usable but not authoritative. Do not paste them into a memo without checking the transcript.
- Fees: If Fireflies materially shortens your note-taking time, do not bill the pre-Fireflies hour.
Fireflies is not incompatible with 512 — it just requires more configuration and client-facing paperwork than an on-device tool would.
Integrations and Workflow
This is where Fireflies genuinely shines and where I want to be fair. The integration list is broad: Slack, Notion, Asana, HubSpot, Salesforce, Monday, Trello, Google Docs, Zapier, and more. For a firm that already runs on a modern CRM and wants meeting summaries to land in a matter record automatically, Fireflies has more out-of-the-box connectors than most competitors. AskFred, the cross-meeting search assistant, is also legitimately useful once you have a corpus of calls in the system.
The tradeoff is the same tradeoff, restated: every integration is another egress path for client content. Each connector deserves its own diligence.
Pricing and Who It's For
Fireflies offers a free tier plus paid tiers with progressively more storage, integrations, and admin controls. Rather than quote numbers that shift, check the current Fireflies pricing page. Enterprise plans are where you get the retention controls, SSO, and DPA options that a law firm should insist on.
Fireflies is a reasonable fit for:
- In-house teams doing internal meetings, hiring calls, and vendor discussions where privilege is not the primary concern.
- Business-development and marketing calls at a firm.
- Solos and small firms who already live inside a CRM Fireflies integrates with and who will secure client consent before use on matter calls.
It is a harder fit for:
- Criminal defense, matrimonial, plaintiff-side employment, or any practice where subpoena-to-vendor is a foreseeable risk.
- Healthcare and health-adjacent work requiring a BAA.
- Government work with data-locality or FedRAMP requirements.
If your practice sits in the harder-fit category, a fully on-device tool such as Basil keeps the audio and transcript on your own machine and removes the vendor from the subpoena chain entirely. That is not a marketing claim — it is an architectural fact you can verify by looking at whether the tool ships audio off-device.
What I Actually Like
To be fair to Fireflies: AskFred across a corpus of calls is a real productivity gain; the speaker labeling is good; the Slack and CRM push works reliably; and the admin console on enterprise plans gives you the retention and sharing controls a firm needs. If the confidentiality architecture worked for privileged content, this would be a straightforward recommendation for many firms.
Verdict
Fireflies is a mature, integration-rich cloud notetaker. For internal, non-privileged, business-side meetings at a firm, it is a defensible choice with proper configuration. For privileged client calls, the cloud-first architecture requires more diligence, more client consent, and more contractual protection than many lawyers currently apply — and even with all of that, the vendor remains a potential subpoena target in a way an on-device tool is not.
| Pros | Cons |
|---|---|
| Broad integration catalog (Slack, CRMs, task tools) | Cloud processing — audio and transcript leave your custody |
| Strong cross-meeting search via AskFred | Vendor is a potential subpoena target for stored content |
| SOC 2 Type II, DPA available, encryption in transit and at rest | No broadly marketed BAA; harder fit for HIPAA-adjacent work |
| Usable free tier and clear paid tiers | Requires informed client consent workflow to fit ABA 512 comfortably |
| Good speaker labeling and summary quality | Retention is indefinite by default; must be configured |
This review is for information only and is not legal advice.
Frequently asked questions
Is Fireflies.ai safe to use for privileged client calls?
Fireflies is a cloud service that transmits, transcribes, and stores meeting audio on its own infrastructure. That does not make it unusable for privileged calls, but it does mean you should evaluate the vendor's DPA, retention controls, and model-training practices, obtain informed client consent under ABA Formal Opinion 512, and understand that a subpoena served on Fireflies could potentially reach stored content. Many lawyers reserve cloud notetakers for non-privileged meetings and use an on-device tool for matter calls.
Does Fireflies.ai offer a BAA for HIPAA compliance?
As of writing, Fireflies does not broadly market a BAA to general customers. If your practice touches protected health information, treat that as a blocker and get written confirmation from the vendor before onboarding. Check the current security page on fireflies.ai for updates.
Can Fireflies.ai transcripts be subpoenaed from the vendor?
Yes, in principle. Any cloud service that stores your data can receive legal process directed at that data. Fireflies stores audio and transcripts on its infrastructure, so a subpoena or warrant served on Fireflies could reach that content, independent of any process served on you or your client. This is a structural feature of cloud notetakers, not a Fireflies-specific flaw.
How does Fireflies compare to on-device notetakers for lawyers?
Fireflies has a wider integration catalog and a stronger cross-meeting search feature than most on-device tools. On-device tools, by contrast, keep audio and transcripts on your own machine, which removes the vendor from the subpoena chain and simplifies the confidentiality analysis under Model Rule 1.6. The right choice depends on whether your dominant use case is internal or business-development meetings (where Fireflies is compelling) or privileged client calls (where on-device is architecturally simpler).
What consent do I need before using Fireflies on a client call?
At a minimum, follow the recording-consent rules of every jurisdiction represented on the call, disclose to all participants that an AI notetaker is present, and — under ABA Formal Opinion 512 — obtain informed consent from the client to share their information with a third-party AI service. Put the consent in writing in an engagement letter or a matter-specific addendum.
Does Fireflies use client conversations to train AI models?
Fireflies' current policies indicate customer content is not used to train third-party foundation models, and business and enterprise plans provide opt-out from Fireflies' own model-improvement use. Read the current privacy policy and terms carefully and, for law-firm use, get the opt-out documented in your order form before you rely on it.
Meeting notes with no server to subpoena
Basil transcribes and summarizes entirely on-device — privilege-safe by architecture. See Basil for Law →
This review is for information only and is not legal advice.