AI meeting assistants that record, transcribe and summarize calls have spread quickly. They join a video call as a participant, produce a tidy summary and sometimes email it to everyone on the invitation. For a busy attorney, the appeal is obvious. For a law firm, a conversation with a client is often privileged, so the risks need careful thought before anyone clicks "enable."
This post outlines the main issues and a practical approach. It is not legal advice, and privilege and recording-consent rules vary by jurisdiction, so confirm with counsel and your state bar.
Where the risks arise
Privilege and confidentiality
Privileged conversations can lose protection if shared with third parties without a basis for maintaining confidentiality. An AI notetaker typically sends audio or transcripts to a vendor's servers. Whether that vendor relationship preserves privilege and confidentiality depends on its terms, its architecture and the law that applies. ABA Formal Opinion 512 on generative AI discusses confidentiality under Rule 1.6 and the need to understand how a tool handles information, including whether client information might be used to train models or disclosed to others.
Recording consent
Laws about recording calls differ by state. Some require consent from one party, and others from all parties. A notetaker that records without clear notice can create legal and relationship problems. Texas, Arkansas, Louisiana, Oklahoma and Kansas laws should be reviewed by counsel for the specifics, and calls with participants in other states complicate things further.
Uncontrolled distribution
Many tools automatically email summaries to all participants or store them in a shared workspace. A summary containing candid strategy discussions might go to a person who should not have it, such as an opposing party's representative who joined a call.
Retention and discovery
Recordings and transcripts are records. They may be requested in litigation or by regulators, and they stay around for as long as the tool retains them. A casual remark preserved verbatim can look different than a lawyer's thoughtful note.
Accuracy
Automatic summaries can misattribute statements, miss nuance or insert errors. A summary that says the client agreed to something they did not can cause real harm if relied upon.
Third party bots on other people's calls
Even if your firm never uses one, a client, expert or opposing counsel might invite a notetaker to a meeting. You may be recorded without having agreed to a policy.
Questions to ask any notetaking vendor
- Is recorded content or transcript text used to train models?
- Where is data stored, for how long and who at the vendor can access it?
- Can we disable storage entirely or delete recordings on demand?
- Can the administrator control which meetings the tool joins and who receives summaries?
- Does it support single sign-on, MFA and audit logs?
- How does it notify participants that recording is happening?
- What are the confidentiality and breach notification terms?
Policy options
Option A: Prohibit for privileged calls
The simplest approach is to ban AI notetakers on any call involving client confidences or privileged strategy, and approve limited use for internal administrative meetings. Easy to explain and enforce.
Option B: Permit an approved tool with guardrails
If the firm approves a vendor after review, set rules:
- Use only the approved tool and firm accounts, not personal ones.
- Obtain participant consent at the start, and document it.
- Disable automatic distribution of summaries.
- Set short retention and delete raw recordings after review.
- Require attorney review of summaries before they enter the matter file.
- Allow clients to opt out and honor outside counsel guidelines that prohibit AI use.
Option C: Human notes only
Some firms decide that the simplest privilege protection is a human taking notes. That is a legitimate choice, particularly for sensitive practice areas.
Handling other people's bots
Add a line to your meeting procedures: when an unknown notetaker appears, the host should pause the conversation, ask who invited it and remove it if it is not approved. Configure your video platform so that participants cannot invite bots without the host's permission, and use waiting rooms.
Training and communication
Tell attorneys and staff in plain language what is allowed and why. Share a short script, for example: "This call may be recorded for note-taking purposes with the firm's approved tool. Please let me know if you have objections." Update engagement letters or client communications if your firm decides to use these tools.
Technical controls
- Restrict which third-party apps can connect to calendars and video platforms.
- Review application consent settings in Microsoft 365 or Google Workspace to block unapproved assistants from reading calendars and joining meetings.
- Audit existing integrations and remove unapproved ones.
How we help
Counsel Cyber helps law firms review AI notetaking products, lock down app permissions and draft practical usage rules. If your attorneys are already using these tools, we can inventory what is connected today and help you decide where to draw the line.