​
Overview

LowerPlane connects to Fireflies.ai using an API key with read-only access. Once connected, LowerPlane syncs your Fireflies workspace users so they appear in Access Reviews — helping you verify that only current employees have access to your recorded meetings, that admins are appropriate, and that offboarded employees have been removed.

​
What LowerPlane Collects

LowerPlane only reads the user roster (the GraphQL users query). It never reads your meetings, transcripts, recordings, or AI summaries.

​
Prerequisites

Use an admin’s API key so the full workspace roster is reviewed. Fireflies API keys are per-user — a non-admin key may only return that single user.

​
Step 1: Get your API Key

  1. In Fireflies, open Settings → Developer settings (the Personal tab)
  2. Your API key is displayed there — click Get API Key if it is not shown yet
  3. Copy the key
Important: Treat this key like a password. Anyone with it can read the data allowed by your Fireflies role.

​
Step 2: Connect in LowerPlane

  1. Go to Integrations in LowerPlane
  2. Find Fireflies and click Connect
  3. Paste the API Key
  4. Click Connect
LowerPlane validates the key and starts the first sync automatically.

​
Automated Checks

When Fireflies is connected, LowerPlane automatically:
  • Includes Fireflies users in user access reviews for SOC 2 (CC6.1/CC6.2) and ISO 27001 (A.5.16/A.5.18)
  • Flags Fireflies accounts belonging to offboarded employees so access can be revoked
  • Confirms every account is traceable to a named individual, with admin accounts flagged

​
FAQ

Which users are collected? Every user your API key can see. Use an admin’s key to review the entire workspace — a non-admin key may return only that user. Does LowerPlane read my meetings or transcripts? No. LowerPlane only reads the workspace user list. It never accesses meetings, transcripts, recordings, or AI summaries. Is MFA checked? No. Fireflies’ API does not expose per-user MFA status, so LowerPlane cannot verify it for Fireflies.