Your meetings stay yours
How Acta protects your recordings, transcripts and notes: who can see them, where they live, and how you stay in control.
- SOC 1 Type 2
- HIPAA compliant
Encrypted in transit
All connections use SSL/TLS. HTTP is redirected to HTTPS.
Encrypted at rest
Recordings, transcripts and notes are stored encrypted.
Google Cloud & AWS
Data centers certified ISO 27001 and/or SOC 1 and 2.
Never sold
We don't sell your data, and we don't open your recordings.
How we protect your data
Infrastructure
- Hosted in Google Cloud Platform and Amazon Web Services facilities
- Database in a Virtual Private Cloud behind restricted security groups
- Only the minimum required traffic is allowed to and between servers
Access control
- Access limited to people with a business need to know, under confidentiality
- Acta staff don't access your recordings or transcripts
- The only exception: a recording you choose to share with support
Incident response
- Procedures in place for any suspected personal data breach
- We notify you and the relevant regulator where the law requires
- Only encrypted connections: HTTP requests are redirected to HTTPS
You stay in control
Record without a bot
The desktop app and Chrome extension record from your own computer.
Participants are told
People are notified when a meeting they join is recorded, and can leave.
Delete any time
Delete single recordings from the web app, or your whole account.
Shared only by you
Recordings and notes belong to your account and are shared only if you share them.
For enterprise teams
Extra controls on the Enterprise plan.
- Single sign-on (SSO)
- On-premise deployment
- Private storage
- Custom data retention
- Transcript and summary only mode
- Super admin role
Your data rights
Under applicable data protection law, you can ask us to:
- Access your personal data
- Correct your personal data
- Object to or restrict processing
- Erasure (the right to be forgotten)
- Data portability
Email contact@acta.ai to make a request. Details are in the Privacy Policy.
Security questions
Found a security issue? Email support@acta.ai.
Who can see my meeting recordings?
You, and the people you choose to share them with. Acta staff don't access recordings or transcripts unless you share one with our support team to resolve an issue.
Is my data encrypted?
Yes. Data is encrypted in transit with SSL/TLS, with HTTP redirected to HTTPS, and encrypted at rest.
Where is my data hosted?
In Google Cloud Platform and Amazon Web Services facilities. Account information and recordings are hosted in the United States. Enterprise plans can use private storage or an on-premise deployment.
Which compliance standards does Acta meet?
Acta is SOC 1 Type 2 compliant and HIPAA compliant. Contact us if your security team needs the details.
Does Acta sell my data?
No. We don't sell collected data to other companies or third parties.
How long do you keep my recordings?
Until you delete them. By default, meeting recordings are deleted after 6 months of inactivity on an account. Enterprise plans can set custom retention.
Can I record without a bot joining the meeting?
Yes. The Acta desktop app and Chrome extension record from your own computer, so no extra participant joins.
Need a security review?
We can walk your team through how Acta handles your data.