Article Summary: AI note-takers join your meetings, transcribe everything said, and save the recording and summary to the vendor’s servers. Who can see that recording depends on the tool. Some keep your data inside your own Microsoft or Google environment and never use it for training, while others store it on their own servers and may use it to improve their AI. Some also auto-join meetings from your calendar without anyone pressing record. Before you let one into a client or staff meeting, it’s worth knowing where the recording goes and getting everyone’s consent.
AI note-takers have become normal in a short time.
You start a Teams, Zoom, or Google Meet call, a bot joins to record the conversation, and minutes later everyone gets a tidy summary with action items.
It saves real time, which is why staff often adopt these tools on their own, before anyone has asked where the recording ends up.
The problem is, every word of the meeting, including the parts you would never put in writing, gets captured, stored somewhere, and read by whoever has access. Few business owners have stopped to ask who that includes, or what happens to the recording afterward.
What an AI note-taker actually does
An AI note-taker is a tool that joins a meeting, records the audio and sometimes the video, turns the speech into a written transcript, and produces a summary. Common ones include Microsoft 365 Copilot in Teams, Otter, Fireflies, and Fathom.
Most connect to your calendar so they can join automatically, and some will sit in on any meeting on your schedule unless you turn that setting off.
The recording and transcript do not disappear when the call ends.
They are saved, usually in the cloud, where they can be searched, shared, and exported later.
Where they are saved, and who can reach them, depends on which tool you use.
Who can see the recording?
Start with the obvious group: anyone the meeting organizer shares the summary with.
Many note-takers email the transcript to every attendee by default, and some send it to people who were invited but never joined. When the meeting covered a sensitive topic, that distribution list matters.
Then there is the tool’s own access.
With a cloud note-taker, the recording sits on the vendor’s servers, which means the vendor’s systems, and in some cases its staff, can reach it under the terms you agreed to.
If the tool auto-joined from someone’s calendar, the recording may live on an account you do not control, belonging to whichever employee connected the bot.
A law firm publication on the legal risks of AI note-takers warned that letting a note-taker vendor access or use your transcripts for its own purposes can even risk waiving attorney-client privilege for businesses that handle legal matters.
Does the tool use your meetings to train its AI?
This is where tools differ the most, and it is worth checking before you choose one.
Microsoft states that Copilot in Teams does not use your prompts, responses, or meeting content to train its AI models, and that the data stays inside your organization’s Microsoft 365 environment.
Microsoft’s privacy documentation says this directly, and notes the content is processed within the Microsoft 365 service boundary rather than on the public version of the AI.
Third-party note-takers vary widely.
Some store your recordings on their own servers and, depending on the terms you accept, may use that data to improve their models.
Others say they do not train on customer data at all. The only way to know is to read the specific tool’s privacy terms, because two tools that look almost identical can treat your data very differently.
The consent question
Do not treat a calendar invitation as blanket consent to record or summarize a meeting. Tell participants before the tool joins, identify what it will capture, and provide a practical alternative when recording is not appropriate. The right approach depends on the relationship, the sensitivity of the conversation, and applicable federal or provincial privacy law.
Canadian organizations subject to PIPEDA should collect only what is needed, be open about the purpose, limit access and retention, and protect the recording and notes with appropriate safeguards. Quebec and some other provinces have additional privacy requirements. Get privacy or legal advice for employee, client, health, financial, or other sensitive meetings.
How to use AI note-takers safely
- Choose the tool deliberately. Confirm whether it is a native feature of your meeting platform or a third-party service, and review its settings, administrator controls, data location, retention, and contractual privacy terms.
- Limit who can use it. Use named accounts, multi-factor authentication, and role-based access. Keep recordings and summaries out of broadly shared folders.
- Set a retention rule. Delete recordings and notes when the business purpose ends, unless a legal or contractual obligation requires longer retention.
- Use human review. AI summaries can omit context or introduce errors. Review decisions, commitments, and sensitive details before relying on or distributing them.
Frequently Asked Questions
Is it legal to record a meeting with an AI note-taker?
It depends on where everyone in the meeting is. Around a dozen U.S. states and most Australian states require everyone to consent. The UK, federal U.S. law, and most U.S. states allow it with one person’s consent, though in the UK and Europe you also have to inform people and have a valid reason under data-protection law. The safe approach everywhere is to announce the recording and let people object before it starts.
Does Microsoft Copilot use my meeting data to train its AI?
No. Microsoft states that Copilot in Teams does not use your meeting content, prompts, or responses to train its foundation AI models, and that the data stays within your organization’s Microsoft 365 environment.
Can an AI note-taker join a meeting without me knowing?
Yes. Many tools connect to a user’s calendar and can auto-join meetings, sometimes ones the user isn’t even attending. You can turn auto-join off so the bot only records when someone chooses to start it.
Where are AI note-taker recordings stored?
In the cloud. With Microsoft Copilot, the data stays inside your Microsoft 365 tenant. With many third-party tools, recordings sit on the vendor’s own servers. Where they live and who can reach them depends on the tool, so check its terms.
Should we let staff use Otter or Fireflies for work?
You can, with rules in place. Choose one approved tool, turn off auto-join, announce recording and get consent, check how the tool handles your data, and keep it out of legal, HR, and confidential client meetings.
—
This article is republished with permission from The Technology Press. and adapted by My IT Guy for a Canadian SMB audience.
