{
  "slug": "wispr-flow",
  "category": "speech-to-text",
  "name": "Wispr Flow",
  "description": "Voice dictation app that transcribes speech in the cloud and inserts AI-formatted text into any app. It also includes a meeting notetaker.",
  "website": "https://wisprflow.ai",
  "license": null,
  "platforms": [
    "windows",
    "macos",
    "ios",
    "android"
  ],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "F",
  "score": 26,
  "coverage": 100,
  "summary": "Wispr Flow scores 26 out of 100 (grade F) on the dictation and transcription criteria. It meets 1 of 10 criteria: TLS configuration. It partly meets no ads or data sales, independent audit, security headers and no training on recordings. It does not meet open source, no trackers or telemetry, transparency report, tells users about requests and runs on the device. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.",
  "url": "https://privacyratings.com/speech-to-text/wispr-flow/",
  "markdown": "https://privacyratings.com/speech-to-text/wispr-flow/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://wisprflow.ai/privacy-policy",
      "note": "The website loads PostHog and Google Tag Manager, and the policy describes third-party analytics including Google Analytics."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://wisprflow.ai/privacy-policy",
      "note": "Funded by subscriptions and does not sell data, but uses cookies and ad networks such as LinkedIn to advertise its own product."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://docs.wisprflow.ai/articles/3467817258-security-and-compliance-faq",
      "note": "SOC 2 Type II and ISO 27001 reports are available only through the Trust Center after approval and an NDA."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "No transparency report or government request policy is published."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "No published policy on notifying users about data requests."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=wisprflow.ai&hideResults=on",
      "note": "Grade A+"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=wisprflow.ai",
      "note": "Grade B (70/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    },
    "runs_locally": {
      "title": "Runs on the device",
      "weight": 3,
      "answer": "no",
      "evidence": "https://wisprflow.ai/data-controls",
      "note": "Transcription always occurs in the cloud."
    },
    "no_training": {
      "title": "No training on recordings",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://docs.wisprflow.ai/articles/9609615338-private-cloud-sync-and-data-sharing-preferences-in-wispr-flow",
      "note": "Audio, transcripts and edits are used to improve models by default on Free and Pro plans, with an opt-out; Enterprise is excluded."
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "B",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Google Tag Manager",
        "host": "www.googletagmanager.com",
        "effect": "no"
      },
      {
        "name": "PostHog",
        "host": "inline code",
        "effect": "no"
      }
    ],
    "tested_at": "2026-10-01T07:31:58.703Z"
  },
  "last_modified": "2026-10-01T07:44:20Z"
}