> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tiro.ooo/llms.txt
> Use this file to discover all available pages before exploring further.

# Security & Privacy

> Audio is discarded right after transcription, and notes are encrypted and stored in the Seoul region. Your data is never used to train AI.

export const PlanBadge = ({plan, lang = "ko"}) => <span className="plan-badge">
    {({
  pro: {
    ko: "Pro+",
    en: "Pro+",
    ja: "Pro+"
  },
  team: {
    ko: "팀 플랜",
    en: "Team Plan",
    ja: "チームプラン"
  },
  enterprise: {
    ko: "엔터프라이즈",
    en: "Enterprise",
    ja: "エンタープライズ"
  }
})[plan][lang]}
  </span>;

## Audio is discarded right after transcription

Tiro's principle is simple: audio is processed only for transcription, then discarded beyond recovery the moment that's done.

* **Live recording**: your microphone and system audio are transcribed in a stream, then dropped from memory once converted. Nothing is written to disk in plain form.
* **Audio file upload and offline recording**: uploaded files are discarded automatically after transcription and speaker separation finish.
* **The only exception is when you turn it on yourself.** When you enable [paragraph-level audio replay](/en/guide/notes/replay), the audio stays in your own account's encrypted storage. It's off by default, and the audio is destroyed when you turn it off or request deletion. Your organization can also block this feature for everyone.

## How is your data stored?

* Note text is stored on our servers so you can read it across your devices. It lives in the **AWS Seoul region (ap-northeast-2)** and is protected by read replicas in separate availability zones and encrypted backups.
* Stored data is encrypted with per-user and per-organization keys using **AES-256**, and traffic in transit is protected with **TLS 1.3**.
* Access is tightly controlled. Permission to read data in plain form is limited to the CTO and one senior engineer, and every access is logged permanently down to the query and column.

## Your data is never used to train AI

No information, including your conversation records, is used to train or fine-tune models. This is the same for free, paid, and enterprise customers, and the governing clauses are Article 15 of our terms of service and our privacy policy. The vendors involved in speech recognition and summarization are listed one by one in the outsourcing section of our [privacy policy](https://tiro.ooo/privacy-policy); for vendors that data is transferred overseas to, the data shared, the country of processing, and the retention period are published in the cross-border transfer section of the same policy.

## What happens when you delete something?

* **Deleting a note**: the note first moves to the trash, and once the retention period passes (30 days by default for regular workspaces; Enterprise workspaces can set 0, 7, 14, or 30 days), it's automatically and permanently removed from the operational database, search index, and cache. If your workspace has set an immediate-deletion policy, it's permanently removed right away without going through the trash. Disaster-recovery backup copies are discarded automatically once the retention period (up to 21 days) passes.
* **Deleting your account**: when you request deletion or withdraw, your account details and the notes in workspaces you used alone (including paragraphs, context, and audio) are deleted immediately and beyond recovery. Notes in a workspace where other members remain stay in that workspace, and notes you shared into a workspace folder keep showing with your authorship as anonymous. If your organization has turned on note retention for departed members, notes outside shared folders also move to the organization's Archived Notes workspace and remain there. Logs are retained for at least one year, then destroyed. The governing clause is in the destruction-procedure section of our [privacy policy](https://tiro.ooo/privacy-policy).

## Security certifications

* Tiro holds **ISO/IEC 27001:2022** certification (June 2026).
* Both the **SOC 2 Type 1** (March 2026) and **Type 2** (July 2026) audits are complete, covering all five Trust Services Criteria.
* Audit reports are available after you sign an NDA.

## Security options for enterprises <PlanBadge plan="enterprise" lang="en" />

On the Enterprise plan you can configure audit logs (SIEM integration), an allowlist of external sharing domains, data-retention policies with deletion evidence, SAML/OIDC SSO, MFA, SCIM, and session and device controls, all at the policy level. If you need security review materials (data location, compliance, sub-processor list), reach out to our sales team. For setup details, see [organization security settings](/en/guide/privacy/enterprise-security).

## Frequently asked questions

### Does Tiro keep the audio files I record?

Not by default. Audio is discarded right after transcription, and it's kept in your own account's encrypted storage only when you turn on paragraph-level audio replay yourself.

### Can Tiro staff see my notes?

Access to data in plain form is limited to two people, and every access is logged permanently. We don't access customer notes unless it's operationally necessary.

### Does my data leave the country?

Note data is stored in the AWS Seoul region. With an Enterprise contract, you can also arrange a dedicated VPC or a different region. For organization-level security options, see [organization security settings](/en/guide/privacy/enterprise-security).

***

**Related pages**: [Paragraph-level replay](/en/guide/notes/replay) · [Local audio storage](/en/guide/notes/local-audio) · [Account management guide](/en/guide/account/overview)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.