Learn about how we encrypt your data

Last updated: January 20, 2026

At Fireflies, protecting your data is a core part of how the product is built.
This guide explains how your data is encrypted in storage and in transit, and how this supports security and compliance requirements such as HIPAA and FERPA.

Data encryption at rest

  • Fireflies encrypts data at rest, including: Emails, Calendar events, Meeting transcripts, and Other personally identifiable metadata.

  • All stored data is encrypted using 256-bit AES encryption to help prevent unauthorized access.

Data encryption in transit

  • Data is encrypted while moving between your devices and Fireflies’ systems using 256-bit SSL/TLS encryption.

  • This helps ensure that information remains protected as it travels across networks.

Storage infrastructure

  • Fireflies’ database is hosted in a virtual private cloud (VPC) on AWS.

  • For organizations that require additional control, Fireflies also offers Private Storage, which allows data to be stored in dedicated infrastructure selected by your organization.

How this relates to HIPAA and FERPA

Strong encryption is a foundational security control that supports regulated use cases.

  • HIPAA requires safeguards to protect healthcare-related information

  • FERPA requires protection for student education records

Encryption at rest and in transit helps support both requirements. However, encryption alone does not enable compliance.

For more information about how Fireflies protects your data and addresses security and compliance requirements, see the following resources: