Who Can See What Your AI Note-Taker Records?

Article Summary: AI note-takers can save time, but they also record and store sensitive meeting conversations. Before using one in client, staff, HR, legal, or confidential meetings, your business should know where the data goes, who can access it, whether it may be used for AI training, and whether everyone has agreed to being recorded.

AI note-takers can save time, but they also create a record of conversations your business may not want stored, shared, or accessed without clear rules.

These tools can join meetings, record what is said, create transcripts, summarize action items, and save that information after the call ends. That can be useful for busy teams, but it also raises important questions: Where does the recording go? Who can see it? Is it stored in an account your business controls? Can the vendor access or use the data? And did everyone in the meeting agree to being recorded?

In this article, we’ll explain what AI note-takers capture, where meeting recordings and transcripts may be stored, who may be able to access them, why consent matters, and what steps your business can take to use these tools responsibly without losing control of sensitive information.

What AI note-takers capture during meetings

An AI note-taker is a tool that joins a meeting, records the audio and sometimes the video, creates a written transcript, and then produces a meeting summary.Common tools include Microsoft 365 Copilot in Teams, Otter, Fireflies, and Fathom.

Many of these tools connect to a user’s calendar. That allows them to join meetings automatically, and some may join meetings on a person’s schedule unless that setting is turned off. The recording and transcript usually do not go away when the meeting ends. They are saved in the cloud, where they may be searched, shared, downloaded, or exported later.

Where that information is stored, and who has access to it, depends on the tool your business is using.

Who can access your AI meeting recordings?

The first group is simple: anyone who receives the summary or transcript. Many AI note-takers send meeting notes to attendees by default. Some may also send them to people who were invited but did not attend. If the meeting included sensitive information, that matters.

Then there is the tool itself. With many cloud-based note-takers, the recording is stored on the vendor’s servers. That means the vendor’s systems, and in some cases its staff, may be able to access the recording under the terms your business agreed to. Before rolling out a tool, read those terms closely: what the vendor can do with your data, how long they keep it, and whether they can use it to train their own models. It’s also worth asking how they vet the staff who could have access, background checks, access controls, and internal policies vary a lot between vendors. We’ve put together a vendor checklist to help you ask the right questions before signing on.

This can become even harder to manage when an employee connects a tool through their own account. If the AI note-taker joins meetings from that person’s calendar, the recording may be stored in an account your business does not fully control.

There are also confidentiality concerns. A law firm publication on the legal risks of AI note-takers warned that allowing a note-taker vendor to access or use meeting transcripts for its own purposes may even risk waiving attorney-client privilege for businesses handling legal matters.

That does not mean every AI note-taker is a problem. It means your business needs to know where recordings go, who can access them, and what the vendor is allowed to do with the data.

Can your meeting data be used to train AI?

This is one of the biggest differences between tools.

Microsoft states that Copilot in Teams does not use your prompts, responses, or meeting content to train its AI models. Microsoft’s privacy documentation also says that the data stays inside your organization’s Microsoft 365 environment and is processed within the Microsoft 365 service boundary, rather than through the public version of the AI.

Third-party AI note-takers are not all the same. Some store recordings on their own servers and, depending on the terms you accept, may use customer data to improve their models. Others state that they do not train on customer data.

That is why businesses should not assume two similar-looking tools handle data the same way. Before approving an AI note-taker, check where recordings are stored, whether meeting content can be used for AI training, and who has access to the data. If those answers are unclear, the tool may not belong in client, HR, legal, or confidential business meetings.

Why consent matters before recording a meeting

Recording a meeting is not always a decision one person can make alone.

The rules depend on where the people in the meeting are located. In around a dozen U.S. states, and in most Australian states, everyone in a conversation must agree to being recorded. Federal U.S. law, most other U.S. states, and the UK allow recording when one participant consents.

Privacy rules can also apply. In the UK and Europe, recording people is generally treated as handling personal data under GDPR. That means participants usually need to be told they are being recorded, why the recording is happening, and the reason for collecting it.

The safest approach is straightforward: tell people before the recording starts, explain why the meeting is being recorded, and give them a chance to object.

This is especially important for client meetings, HR conversations, legal discussions, financial reviews, and anything covered by confidentiality. In some situations, it may be best to check with a lawyer before recording at all.

How businesses can use AI note-takers responsibly

You do not have to ban AI note-takers to use them responsibly. The better approach is to set clear rules so employees know what is allowed, what is not, and when extra care is needed.

• Choose one approved tool. Decide which AI note-taker your business allows, and ask staff not to connect other tools to company meetings. This helps keep recordings in a place your business can manage.
• Turn off auto-join. Set the tool to join only when someone intentionally chooses to record. This reduces the chance of a bot entering a meeting where it does not belong.
• Announce the recording and get consent. Make it normal to tell people when a meeting is being recorded. If someone objects, do not record.
• Use tools that keep data in your environment. A tool that stores recordings inside your Microsoft or Google tenant, and does not train on your data, is easier to control than one that keeps everything on its own servers.
• Limit who receives the summary. Review the default sharing settings so transcripts are not automatically emailed to everyone, including people who were invited but did not attend.
• Keep bots out of sensitive meetings. For legal, HR, financial, and confidential client conversations, the default should be no recording unless there is a clear reason and everyone agrees.

If your business uses Microsoft 365, an administrator can manage whether Copilot and transcription are allowed in Teams meetings. That gives your business one place to set the rule, instead of relying on each person to make the right decision on their own.

Conclusion

AI note-takers can be a helpful way to save time, capture next steps, and keep meetings organized. But they also create a record of conversations your business may need to protect.

Before using these tools in everyday meetings, make sure you know where recordings are stored, who can access them, whether meeting data can be used for AI training, and when consent is required. Clear rules help your team use AI responsibly without putting client conversations, employee discussions, legal matters, or confidential business information at unnecessary risk.

If your team is using AI note-takers without a clear policy, now is the time to take a closer look. Contact Atekro today to make sure your AI tools are secure, approved, and set up to protect your business.

FAQs

Is it legal to record a meeting with an AI note-taker?

It depends on where everyone in the meeting is located. Around a dozen U.S. states and most Australian states require everyone to consent. Federal U.S. law, most other U.S. states, and the UK allow recording with one person’s consent, though the UK and Europe also have data-protection requirements. The safest approach is to announce the recording, explain why it is happening, and give people a chance to object before it starts.

Does Microsoft Copilot use my meeting data to train its AI?

No. Microsoft states that Copilot in Teams does not use your meeting content, prompts, or responses to train its foundation AI models. Microsoft also states that the data stays within your organization’s Microsoft 365 environment.

Can an AI note-taker join a meeting without me knowing?

Yes. Many tools connect to a user’s calendar and can auto-join meetings, sometimes including meetings the user is not attending. Turning off auto-join helps make sure the bot only records when someone intentionally starts it.

Where are AI note-taker recordings stored?

They are stored in the cloud. With Microsoft Copilot, the data stays inside your Microsoft 365 tenant. With many third-party tools, recordings are stored on the vendor’s own servers. Where the recording lives, who can access it, and how it may be used depends on the specific tool and its terms.