Wispr Flow

Flow Basic Tier Ratings

Last Reviewed: 2026-07-14

Can dictate marketing copy. 2,000 words/week limit constrains heavy use. Enable Privacy Mode for client-sensitive content.

Excellent for drafting grants by voice. Weekly limits may constrain large proposals. Enable Privacy Mode for sensitive program data.

Great for quick thank you letters and updates. Weekly limit applies. Privacy Mode prevents data storage.

Can dictate program notes quickly. May hit limits with heavy documentation. Privacy Mode required for sensitive content.

Draft reports by voice. Weekly limit may constrain longer reports. Enable Privacy Mode for sensitive governance content.

Create training materials by dictation. Weekly limits apply.

Perfect for quick social posts. Unlikely to hit weekly limits. Low sensitivity content.

Draft emails by voice. May hit limits with high volume.

Dictate research notes and summaries. Limits may constrain.

Draft policy content by voice. Limits may apply for longer briefs.

Quick notes, emails, planning docs. Unlikely to hit limits. Low-sensitivity content.

Can dictate financial narratives. Numbers may need manual review. Privacy Mode required for sensitive data.

Opt-In Only

Without Privacy Mode, dictation data may be used for debugging and improving transcription services. Model training requires explicit opt-in per the Feb 2026 privacy policy update. Voice data is never sold or shared. With Privacy Mode on, nothing is stored.

Yes - Privacy Mode

Enable Privacy Mode in Settings → Data & Privacy → Privacy Mode for Zero Data Retention. To opt out of model training specifically, do not opt in (training is opt-in, not opt-out). Opt-in/out can be changed at any time.

Possible

Without Privacy Mode enabled, dictation data may be reviewed to debug model failures. With Privacy Mode on, no data is stored or accessible for review. Wispr states data is never sold or shared with third parties.

Zero with Privacy Mode

Voice data not stored when Privacy Mode is enabled. Without Privacy Mode, data retained per Wispr's standard policy (unspecified duration, deleted when no longer needed). Third-party LLM data deleted after 30 days.

Encrypted + HIPAA BAA Available; SOC 2/ISO 27001 under re-audit

Data encrypted in transit and at rest. Cloud-based processing requires internet. HIPAA BAA available on all plans since Aug 2025. SOC 2 Type II and ISO 27001 certifications are Enterprise-scope features, but as of this review both are undergoing re-audit by new auditor A-LIGN after the March 2026 Delve compliance-vendor scandal invalidated prior attestations; SOC 2 Type I (clean opinion) and ISO 27001 Stage 1 were completed April 2026, with SOC 2 Type II and ISO 27001 Stage 2 still in progress.

33% Nonprofit Discount

Nonprofits get Flow Pro for $8/month (annual billing) vs regular $12/month. Apply via the legacy form at wisprflow.ai/for-non-profits or the newer unified support-ticket system (wisprflow.ai/support > Billing > Discount Request). The vendor's newer discount help article specifies eligibility as registered 501(c)(3) organizations. Not available through TechSoup or Goodstack.

50% Student/Educator Discount

Students and educators get 50% off Pro plus 3 months free. Available at wisprflow.ai/students. Contact support or check the app for current options.

Dictation, Not Meeting Transcription

Wispr Flow replaces typing. You speak, it types. Works in any app on Mac, Windows, iPhone, and Android. Not for transcribing meetings — use Fathom or Otter for that.

Privacy Mode (Zero Data Retention)

Available on ALL tiers. When enabled, voice data is not stored or used for training. Enforced on Enterprise. HIPAA BAA is available on ALL plans since August 2025 — not just Enterprise.

HIPAA BAA on All Plans (Since Aug 2025)

Any user — including free Basic users — can accept a HIPAA BAA via Settings → Data & Privacy. Accepting the BAA automatically enables Privacy Mode (Zero Data Retention). Enterprise enforces BAA org-wide. The vendor's July 2026 compliance FAQ uses slightly softer language ('HIPAA-aligned controls; BAA available') following the March 2026 compliance reassessment, but availability itself is unchanged.

March 2026 Delve Compliance-Vendor Scandal and Ongoing Re-Audit

In March 2026, an independent investigation found that Delve — Wispr's former compliance-automation vendor — produced near-identical, seemingly pre-populated SOC 2 audit reports across hundreds of customers, including Wispr Flow; Y Combinator subsequently removed Delve from its community. Wispr's prior SOC 2 Type II and ISO 27001:2022 certifications were proactively invalidated as a result. Wispr has since engaged a new auditor (A-LIGN) and new compliance platform (Drata), and moved its trust center to trust.wispr.ai (SafeBase). As of this review (July 2026), SOC 2 Type I and ISO 27001 Stage 1 are complete, but SOC 2 Type II and ISO 27001 Stage 2 remain in progress — organizations with strict compliance requirements should request current attestation status directly from Wispr.

Command Mode (Pro+)

Voice commands to edit text: 'summarize this', 'make this more formal', 'turn into a list'. Powerful for drafting and refining. Not available on Basic.

Context-Aware Formatting

Adapts tone based on the app you're in. Formal for email. Casual for Slack. Recognizes code syntax in VS Code and coding environments. Personalized Style controls available on Pro+.

Now on Android (Feb 2026)

Android app launched February 23, 2026. Uses a floating bubble interface (no keyboard switch needed). Android allows deeper system-level access than iOS. Free unlimited dictation during launch period. Core features available; Dictionary, Snippets, Styles coming to Android in future updates.

Teams Now Part of Pro (Since Nov 2025)

The separate Flow Teams tier was eliminated in November 2025. Flow Pro now supports both individuals and teams with no seat minimums, shared dictionary and snippets, centralized billing, and free 14-day trials for every new teammate invited.

Cloud-Based Only

Requires internet connection. No offline mode. All transcription happens in the cloud. Privacy Mode addresses data concerns. 30% faster transcription after February 2026 infrastructure rewrite.

Enterprise Security — Currently Under Re-Audit

SOC 2 Type II and ISO 27001 certifications are marketed as Enterprise-tier features. As of this review, both are undergoing re-audit by new auditor A-LIGN after the March 2026 Delve compliance-vendor scandal invalidated Wispr's prior attestations. Enforced HIPAA and Zero Data Retention for the whole organization remain in place. SSO/SAML. MSA & DPA. Advanced usage dashboards. HIPAA BAA (not enforced) is available on all plans.

2026-05

Reportedly in talks to raise approximately $260M in a Series B round led by Menlo Ventures at a valuation of approximately $2 billion — nearly triple the $700M valuation from November 2025 — per Bloomberg and multiple other outlets. As of this review, Wispr has not publicly confirmed the round and terms could still change.

2026-04

SOC 2 Type I audit completed by new auditor A-LIGN with a clean, unqualified opinion (scope: Security). ISO 27001:2022 Stage 1 assessment also completed by A-LIGN. SOC 2 Type II and ISO 27001 Stage 2 remain in progress as of this review.

2026-03

Delve compliance-vendor scandal: an independent investigation ('Deepdelver' Substack, covered by TechCrunch) alleged that Delve, Wispr's compliance-automation vendor, produced near-identical, seemingly pre-populated SOC 2/ISO 27001/HIPAA reports across hundreds of customers, naming Wispr Flow as one of the affected companies. Wispr's prior SOC 2 Type II (ACCORP Partners) and ISO 27001:2022 (Gradient Certification Inc.) certifications were proactively invalidated. Y Combinator removed Delve from its community on April 4, 2026. Wispr responded by engaging A-LIGN as its new independent auditor, migrating to Drata as its compliance-automation platform, and moving its public trust center to a SafeBase-powered portal at trust.wispr.ai.

2026-03

Published 'The Master Plan' blog post outlining three-phase roadmap: reliable voice input, voice to action, and ubiquity through wearables including a smart ring concept. Company training own large-scale voice models as of early 2026.

2026-02

Android app launched February 23, 2026. Floating bubble interface provides deeper system-level access than iOS keyboard. Hinglish model released for Indian market. Infrastructure rewrite delivers 30% faster dictation. Total funding reached $81M.

2025-11

Flow Teams tier merged into Flow Pro. Pro now supports both individuals and teams with no seat minimums, no upfront payment, free 14-day trials for every invited teammate, shared dictionary/snippets, and centralized billing. Only Enterprise now for advanced compliance.

2025-11

Raised $25M from Notable Capital. Valuation at $700M. Used by 270+ Fortune 500 companies. 125 new enterprise customers per week.

2025-08

HIPAA BAA expanded to all plans including free Basic tier. Any user can accept a BAA in Settings → Data & Privacy, which also enables Privacy Mode. Previously HIPAA enforcement was Enterprise-only. This is a significant privacy policy expansion.

For organizations with 5+ staff

Flow Pro at $8/month (nonprofit annual) is excellent value for teams of any size. Unlimited dictation, Command Mode, shared snippets and dictionary, centralized billing. No seat minimum since November 2025. Enable Privacy Mode for sensitive content. HIPAA BAA available on Pro — accept it in settings for health-related work.

For organizations with fewer than 5 staff

Free tier (2,000 words/week desktop) may suffice for light use. Pro at $8/month for heavy writers, accessibility needs, or teams. HIPAA BAA now available even on the free plan — accept it in settings if handling any health-related content.

For health data or vulnerable populations

HIPAA BAA remains available on ALL plans since August 2025, including free Basic. For individual practitioners, accept the BAA in Settings → Data & Privacy (this also enables Privacy Mode). For organizations needing enforced compliance for all staff, Enterprise tier enforces Zero Data Retention and HIPAA org-wide. IMPORTANT CAVEAT (new as of this review): Wispr's SOC 2 Type II and ISO 27001 certifications were invalidated in March 2026 after a compliance-vendor scandal and are currently under re-audit by a new independent auditor (A-LIGN); only SOC 2 Type I and ISO 27001 Stage 1 are confirmed complete as of July 2026. Organizations relying on these specific certifications for vendor-risk or compliance sign-off should request current attestation documents directly from [email protected] before finalizing procurement. Pro with Privacy Mode and BAA may work for non-PHI content and small teams who can self-enforce.

"I have Parkinson's, and this app has just made my life so much easier using my Mac. I can't even explain the change that it has provided for me."

"I was able to dictate ~70% of our Q2 board doc with Wispr, it was a massive time saver!"