BAA covers Teams under the Microsoft DPA · Transcription is on by default for new policies · 120-day default expiration, and changes apply only to newly created files
| Meeting transcription & recording | |
|---|---|
| HIPAA BAA | YesMicrosoft Teams appears in Microsoft's HIPAA in-scope services list, with the BAA available by default under the Microsoft Online Services Data Protection Addendum for covered entities and business associates |
| Trains on your data | Not stated in the transcription documentationMicrosoft's no-training commitment is published for Copilot, but the Teams transcription and recording admin docs do not address model training |
| Survives deletion | Yesstructurally - recordings and transcripts default to 120-day expiration, but "Any changes to this setting only affect newly created recordings and transcripts. You can't change the expiration time on existing meeting recordings and transcripts." Admins can set 1 to 99999 days, or -1 for never. Transcripts are stored alongside recordings in OneDrive and SharePoint |
| Deployer / admin log access | Yestranscripts and recordings sit in OneDrive and SharePoint under standard admin control; participants can view the transcript after the meeting with timestamps and speaker attribution |
| Third-party attestation | Office 365 is named in Microsoft's SOC 2 Type 2 in-scope list, audited annually on an Oct 1 - Sep 30 cycle with quarterly bridge letters. Teams transcription is not separately named |
The assumption that transcription stays off until enabled - it is "On by default for new policies," and on by default for webinars and town halls. Also the assumption that shortening the expiration window cleans up history: the change reaches only newly created files
Vendor terms change without notice. This page reflects what Microsoft Teams published as of September 2, 2026. Re-verified quarterly.
If you need a scored Go / Conditional Go / No-Go verdict for a vendor decision — including a vendor not listed here — that's an AI Vendor Risk Assessment: three binary industry gates, nine scored criteria, four provenance fields on every finding. $997, delivered in 48 hours.
See how AVRA works →Want all 13 tools in one file?
Covers 22 tiers across 13 tools — same sourcing, side by side, printable for a vendor file.