Privacy and preparation

AI meeting notetakers and consent: transcripts you may not be able to license

By SourceX Editorial · Reviewed by Noah Loul · October 9, 2026

Short answer

AI notetaker transcripts are among the hardest company records to license, because participants agreed, at most, to a recording for a meeting, not to licensing, and external participants may never have agreed at all. Exclude a transcript set unless you can show who was recorded, what they were told, which recording laws apply and what the vendor's terms permit.

Key takeaways

Consent to record a meeting is not consent to license the transcript, and the two questions are assessed separately.
External participants, such as customers, candidates and vendors, are the main reason transcript sets are excluded.
Some states require every party's consent to record, and a call that crosses state lines can pull in the stricter rule.
Transcripts created on employees' personal notetaker accounts may not be under the company's control at all.

Why are notetaker transcripts riskier than other records?#

Notetaker transcripts are riskier than most company records because they capture everyone in a conversation word for word, including people who never chose the tool. A support ticket records what a customer decided to write; a transcript records what a customer said, often after a bot joined automatically from someone else's calendar.

Transcripts also pull sensitive content into ordinary meetings. A weekly project call can drift into a colleague's health, a client's financial trouble or legal advice. Litigation over notetaker recording and training practices has made consent a live question, and the same questions can reach the companies that used the tools.

Recording consent rules in the US vary by state. Federal law and many states allow a conversation to be recorded with the consent of one participant, while several states require the consent of every party. When participants sit in different states, the stricter rule may govern, and courts do not always agree on which state's law applies.

Meeting tools often show a recording banner or play an announcement, and notetaker bots usually appear as a named participant. Whether that counts as notice or consent in a given state, for a given participant, is a legal question. And consent to record does not settle whether the recording or transcript may later be used for something else, such as licensing.

A consent checklist should be applied to each set of transcripts, grouped by tool, account and meeting type. Answer every item from records such as admin logs, invitations and policy versions, not from memory.

Which tool created the transcripts, and under a company or a personal account?
Who enabled the notetaker, and did it join meetings automatically from calendars?
Did the bot announce itself, and did the meeting invitation mention recording?
Were external participants present, and in which states or countries were they?
What did the company's employee notices and notetaker policy say at the time?
Do customer, client or vendor contracts restrict recording or later use of conversations?
Did any meeting involve counsel, HR matters, health or financial details?
What do the vendor's terms say about ownership, export and the vendor's own use of content?
Have any participants asked for recordings or transcripts to be deleted?

Which transcripts to exclude by default#

Some transcript types should be excluded by default, with exceptions made only on documented evidence. The table sets a starting position for counsel to adjust to the company's own notices and contracts.

Audio and video files carry more risk than text. A voice can identify a person after every name is removed, and voiceprints may fall under biometric privacy rules in some states. A cautious default is to license only reviewed text transcripts, if any.

Which transcripts to exclude by default
Transcript type	Main issue	Default
Sales and customer calls	External consent and customer confidentiality	Exclude
Candidate interviews	Applicant personal data and consent	Exclude
HR, performance and disciplinary meetings	Employee privacy and sensitivity	Exclude
Meetings with counsel and board meetings	Privilege and confidentiality	Exclude
Vendor and partner negotiations	Third-party confidential information	Exclude
Internal engineering, design and project reviews	Employee notice; incidental personal details	Candidate for de-identification and review
Internal training sessions recorded for staff	Employee notice	Candidate for de-identification and review

Vendor terms: who controls the transcript?#

Vendor terms decide whether the company controls a transcript at all. Read the notetaker's terms for ownership of content, the vendor's right to use content to improve its own models, admin controls over retention and export, and what happens to content in personal accounts. Platform commitments describe only the vendor's own use. Zoom's online terms, for example, say it does not use audio, video, chat or other communications-like customer content to train Zoom or third-party AI models; that limits Zoom, but says nothing about whether the company may license its own recordings.

Personal accounts are the common trap. When employees sign up for a free notetaker with a work email and connect it to their calendar, transcripts can sit in an account the company does not administer, under terms the company never accepted. Those transcripts are usually excluded, and the fix going forward is to approve tools, require company accounts and set vendor training options deliberately.

What to do with transcripts you cannot license#

Transcripts you cannot license still have a path forward, though not as raw records. The safer options keep the knowledge the meetings produced and leave the recordings behind.

Keep them for the internal purpose they were made for, under your retention schedule, and delete them when that schedule says so.
Have staff write up recurring know-how from those meetings as company documents, such as playbooks, checklists or decision guides, which are new records the company authors and controls.
License the surrounding written records instead, such as project plans, issue logs and review notes, which often capture the same decisions without anyone's voice or verbatim words.
Change the setup for future meetings so that new transcripts are created under a notice and policy that support later use.

Illustrative: a consulting firm sorts its transcript archive#

Illustrative: a fictional operations consulting firm hopes to license internal project reviews and methodology sessions that show how consultants diagnose supply chain problems. Over several years, its consultants used an AI notetaker on client calls, internal reviews and recruiting interviews, some through the firm's workspace and some through personal accounts.

The general counsel applies the checklist. Client calls are excluded because client staff never agreed to licensing and engagement letters treat client discussions as confidential. Recruiting interviews and personal-account transcripts are excluded too. Internal project reviews held in the firm's workspace, under an employee notice that covers recording of internal meetings, move forward.

Those internal transcripts still go through de-identification: client names, consultant names and identifying project details are replaced with placeholders, and reviewers remove passages about individual performance. The licensable set is a fraction of the archive, and the firm adopts a written notetaker policy for future meetings.

How SourceX treats meeting transcripts#

Within the SourceX five-step transaction, meeting transcripts are flagged during Rights as a record family with elevated consent risk. Each set is scoped by tool, account and meeting type, and any set that fails the consent checklist is dropped before Preparation begins.

Where a set goes forward, the SourceX Evidence Packet's privacy record states the consent basis relied on, the transcripts left out and how names and details were removed. The supplier approves the final scope, and counsel decides whether the consent evidence is sufficient.

Frequently asked questions

Does a recording banner in the meeting count as consent?

Sometimes, for recording, depending on the state and the participant. A banner or bot announcement may support implied consent to record, but it rarely says anything about licensing. Treat consent to record and permission for later use as separate questions with separate evidence.

Can we license transcripts if we remove every name?

De-identification reduces privacy risk but may not cure a consent problem. If a recording was made without the consent a state required, removing names afterward may not change that. Counsel should look at both how the transcript was created and what remains in it.

Can AI-generated meeting summaries be licensed instead of full transcripts?

Summaries carry fewer personal details, but they are derived from the same recording, so a consent problem with the recording can carry over. They can also misstate what people said. Treat summaries as part of the same transcript set, apply the same checklist, and review them for names and sensitive passages before including any.

Do employee privacy notices cover internal meetings?

They can, if they say that internal meetings may be recorded and describe later uses. Many older notices mention monitoring but not AI training or licensing. Check the version in force when each transcript was created, and update the notice before relying on it for future recordings.

What should a notetaker policy say going forward?

Name the approved tools, require company-administered accounts, require notice to external participants, keep the tools out of HR, legal and candidate meetings, and set vendor training and retention options deliberately. Record the policy's effective date so future licensing reviews can match transcripts to it.

Are typed chat logs treated the same way as meeting transcripts?

Not quite. Typed internal chat generally raises fewer recording-law questions, because participants chose to write. It still raises notice, confidentiality and personal-data questions, and direct messages are often excluded. Customer-facing chat needs its own review.

Sources

Zoom's Terms of Service (Section 10.2) state that Zoom does not use audio, video, chat, screen sharing, attachments or other communications-like Customer Content to train Zoom or third-party AI models. Source

Related resources

See if your company qualifies

A short company assessment. No data uploads are needed.

Check recording consent rules by state Talk to SourceX