AI meeting assistants promise to record, transcribe and summarize every call so nobody has to take notes. For a law firm, the appeal is obvious. The risk is just as obvious: a client call is where privileged information is spoken aloud, and a third-party tool may now be listening, storing and processing it.
This post lays out the questions a firm should answer before allowing any AI notetaker into a client or internal strategy meeting. It is not legal advice. Privilege and recording-consent rules vary by jurisdiction, so involve your general counsel or ethics counsel.
Why this deserves a policy of its own
Several things make notetakers different from other AI tools.
- They capture everything said, not just what a user chooses to paste in.
- They can join automatically, sometimes as an uninvited participant that a client's or opposing party's account attached to the call.
- They create durable artifacts: audio, transcripts, summaries and action items stored with a vendor.
- They can share summaries by email automatically, including to participants outside the firm.
ABA Formal Opinion 512 on generative AI emphasizes confidentiality and understanding how a tool uses information, which applies directly here.
Question 1: Where do the recordings and transcripts go?
Find out where audio and text are stored, who at the vendor can access them, how long they are retained, whether they are encrypted and whether you can delete them on demand. A tool with no clear retention control keeps privileged content longer than you intend.
Question 2: Does the vendor use our content to train its models?
Check the terms and the account settings, and get the answer in writing under a business agreement. Consumer-tier accounts often have different terms than enterprise ones. Do not rely on a marketing page.
Question 3: Does the tool risk waiving privilege?
Whether sharing a conversation with a third-party service affects privilege is a legal question that depends on the facts, the jurisdiction and the vendor's role. Have counsel consider it. Many firms take the conservative route: privileged strategy calls are not recorded or transcribed by AI unless the tool is firm-approved, under agreement and everyone has been informed.
Question 4: What consent is required?
Recording laws differ. Some jurisdictions require all parties to consent, and others require only one. Clients, witnesses and counterparties may be in several states on a single call. Decide on a firm rule: always announce and obtain agreement from every participant before any recording or transcription begins, and document it.
Question 5: What about meetings the firm does not control?
Clients and third parties may invite their own notetaker bots to your calls. Decide how staff should respond: ask who it belongs to, ask that it be removed before substantive discussion, and consider using meeting platform settings to block unknown bots or require lobby admission.
Question 6: Who can see the summaries?
Summaries often get auto-emailed to attendees or posted in a shared workspace. Check default sharing and restrict it. A summary that leaves out nuance can also be wrong, so require attorney review before it goes into the file or to a client.
Question 7: Does it fit our file and retention rules?
A transcript can become part of the client file, and it can become discoverable in a dispute. Decide whether you want these records to exist. If not, configure automatic deletion. If you do keep them, store them in your document management system with the matter, not in a vendor's workspace.
A practical interim rule set
If your firm has not yet decided, a conservative baseline may look like this.
- No AI notetaker joins any client or privileged meeting unless the tool is on the firm's approved list.
- Everyone on the call is told, and consents, before recording starts.
- Personal accounts are never used for firm meetings.
- Meeting platform settings block unrecognized bots.
- Transcripts and summaries are stored only in firm systems and deleted according to the retention schedule.
- A lawyer reviews summaries before anyone relies on them.
Evaluate approved tools carefully
If you do approve a tool, test it first on non-client calls. Review how it handles speaker identification, accuracy with legal terminology and accents, and what happens when it makes mistakes. Record your findings.
Getting help
Counsel Cyber helps firms evaluate AI notetakers, configure Microsoft Teams and Zoom settings and write policies that match how lawyers work. If a vendor is already in use at your firm, we can help you find out where its data goes.