What actually happens when a note taker joins a call?
Be precise about the mechanics, because most of the risk hides in them. A named participant appears in the meeting. It captures the audio of everyone present. That audio leaves the firm and goes to a supplier's systems, where it becomes a transcript and then a summary. The summary lands in an inbox, a shared workspace, or a channel half the office can see. Somewhere in that chain the recording sits on servers the firm does not control, for a period nobody has checked.
In a meeting room the same thing happens with a phone face up on the table. The informality is the problem. Nobody files a decision about a phone on a table.
Compare that with the notebook it replaces. A notebook does not leave the building, cannot be read by a supplier's support engineer, and holds no verbatim record of a client saying something careless at minute fifty. None of this makes the note taker unsafe. It makes it a different kind of object, and firms keep treating it as stationery.
Who has to be told, and who has to agree?
Confidentiality is owed to the client, so the client's agreement comes first. But the client is rarely the only person in the room. There may be a finance director, an employee being interviewed, a spouse, a surveyor acting for the other side, a broker, a witness. Each is speaking on the understanding that someone is taking notes. That is not the same understanding as being transcribed word for word by a third party service.
The practical rule is simple. Ask everyone, at the start, before anything is captured, and say what you are asking for. Not "I'll pop the note taker on", but a sentence naming what happens to the audio. Then write the answer into the record. If someone objects, turn it off. One refusal a month is a small cost. A client discovering afterwards that a confidential negotiation was transcribed by a supplier they have never heard of is a different kind of cost.
Expect more corporate and public sector clients to forbid external recording bots on their calls outright. Finding out mid-meeting is worse than asking during onboarding, while you are agreeing how you will work together. The wider disclosure question sits in telling clients you use AI.
What should the firm check about where the audio goes?
Confidentiality duties do not stop at the firm's walls. If a supplier processes a client's confidential information, the firm answers for that arrangement. Our own position is the plain one: we work under whatever confidentiality agreement a client uses with any other supplier, and nothing a client shares is used for anyone else. Hold any note taker to that standard.
Four questions settle most of it. Where is the audio stored and processed. Who at the supplier can reach it. Is any of it used to train models. What happens to it when the firm stops paying. The answers live in the terms, which are often not what the marketing page implies. Reading the AI vendor contract covers what to look for, and the guide to data protection in AI client work covers the controller side.
Does the transcript become part of the file?
This is the question firms skip, and the one that bites later. A transcript is a document. It can be caught by a subject access request from someone who was in the meeting. It can be relevant to disclosure. It can be asked for in a complaint, an investigation or a professional indemnity claim. And it sits next to a formal attendance note, written by a human, that says something slightly different.
That gap is where trouble lives. The note says the client was advised of the risk. The transcript has the advice given in a hurried half sentence while someone was leaving the room. Both are true. Only one is the record the firm thought it had.
Decide whether transcripts are part of the matter file or working material deleted once the note is approved. Write the decision into the retention policy. Apply it to every matter, not only the sensitive ones.
Firms already make this call about voicemails, drafts and internal email. The note taker adds a new category that needs the same treatment rather than quiet accumulation in a supplier's storage. The downstream record itself is covered in file notes and case notes.
Is the bigger risk accuracy rather than confidentiality?
Often, yes. Transcripts mishear names, figures and technical vocabulary. Summaries come out confident and tidy, which is what makes them dangerous: a neat list of five actions reads as authoritative whether or not the fifth was ever agreed. A fee earner skimming a plausible summary late in the day will approve it. That is the failure set out in the risk in copy and edit, and it stays invisible until a client asks why the firm did something nobody requested.
The answer is not more careful reading. It is a draft produced in the firm's own note structure, with the fields the firm needs filled in: attendees, matter reference, advice given, instruction received, actions with owners and dates. A fee earner checks that in a minute because they know where to look. A wall of prose takes ten and gets skimmed.
What should a firm decide before the next meeting?
- Which meeting types may be recorded, and which never are.
- Who asks, in what words, and where the answer is logged.
- What happens when anyone present says no.
- Which supplier is approved, and on what contractual terms.
- Where audio and transcripts live, and for how long.
- Who signs off the note and the client email before they go anywhere.
Six decisions, an hour of partner time. Until they are made, the honest position is that the firm does not know what is being recorded or where it is sitting, because someone is already running a free note taker on a personal account. That is shadow AI, and management silence causes it. Writing the rules down is covered in writing an AI policy.
What does the safe version actually look like?
Not a tool bolted onto an existing habit. The write-up itself is rebuilt, so that capture, attendance note, client follow-up and task list all come from one structured record, in the firm's own templates and language, inside the tools the team already uses. Consent is asked as part of the process rather than remembered. Retention happens by design rather than good intentions. A named person approves anything that reaches a client.
Done that way, the recording stops being a loose asset nobody owns and becomes a controlled step with a defined end. That is what meeting notes and follow-ups involves in practice, and it is usually one of the larger pockets of unbillable time in a firm. If you are unsure whether it is the biggest in yours, the audit will point you at the right one.