Fireflies adds ISO 42001 AI certification and extends HIPAA to cover FERPA
Fireflies' Enterprise-Grade Security section now lists ISO 42001, described as certification to the international standard for governing and managing AI responsibly, in the second slot where GDPR used to sit.
Fireflies’s pricing page · Change Detected
WHY IT MATTERS
For regulated buyers, the plan that carries the BAA is the plan they have to buy, so a compliance item that now names Enterprise is a pricing fact, not just a trust badge. The thing to watch is whether Fireflies spells out which tier gets HIPAA, FERPA and ISO 42001 coverage on its plan comparison table, or leaves it on the security section alone.
BY THE NUMBERS
- ISO 42001 now holds the security-grid slot GDPR sat in
- HIPAA item is now HIPAA & FERPA: BAA + DSA, Enterprise with Private Storage
- 3 real changes in the last 90 days; average gap about 29 days
- Previous change: Oct 9, 2026, API rate limits published
THEIR RATIONALE
Fireflies does not explain the changes, but the direction is clear from the copy: an AI-specific certification answers the governance questions security reviewers now ask of AI note-takers, and FERPA with a DSA opens the education buyer that the old wording only gestured at. Tying the BAA and DSA to Enterprise with Private Storage reads as a way to pair the compliance promise with the plan that carries the dedicated storage, which is an inference. It fits the company's record: 6 real changes since tracking began on May 25, 2026, 3 of them in the last 90 days, an average gap of about 29 days.
THE SIGNAL
The change itself is a pair of edits to the security grid; what matters is that a compliance item now names a plan. The Audit Logs API joined the Enterprise security suite on Jun 1, and now HIPAA and FERPA coverage is stated as an Enterprise-with-Private-Storage entitlement, where the old text named no plan. Whether that is a restriction or a clarification, the page does not say, and the comparison table is where to look. Feature additions are common across the index, 432 changes across 353 companies in the last 180 days, but the pack does not break out compliance claims, so this should not be read as a market trend.
IN CONTEXT
This is Fireflies' latest move on Enterprise security. Publishing API rate limits on Oct 9 came 13 days before it, and adding the Audit Logs API to the Enterprise security suite on Jun 1 set the pattern of putting security controls behind the top plan. Of its 6 real changes since tracking began, 4 are feature additions, including the Email Assistant on Pro on Aug 17 and video recording moved to Pro on Jun 22. Across the index, feature additions were 21.5% of the 2009 changes tracked in the last 180 days, so a new certification is ordinary by the numbers; the part worth noting is that the HIPAA entitlement now names Enterprise with Private Storage.