Software companies
AI notetaker transcripts: who owns them and can they be licensed?
By SourceX Editorial · Reviewed by Noah Loul ·
Short answer
AI notetaker transcripts are usually controlled by the company whose account recorded the meeting, subject to the notetaker vendor's terms and to the rights of everyone recorded. Internal meetings recorded under a clear employee notice are the most licensable. Calls with customers, candidates or other outside parties usually need consent review or exclusion.
Key takeaways
- Control of a transcript usually follows the account that recorded it, but participants keep privacy and confidentiality interests.
- Consent to record a meeting is a separate question from permission to license the transcript for AI training.
- Recording consent rules differ by state, and calls that cross state lines can bring the stricter rule into play.
- Notetaker vendor terms can claim their own rights to use your content, so check admin settings and the data use clause.
- Internal engineering and product meetings linked to tickets are the strongest candidates; HR, legal and sales calls are usually excluded.
Who has a claim to a meeting transcript?#
A meeting transcript involves several parties at once: the company that ran the recording, the people who spoke, any outside guests, the notetaker vendor and the meeting platform. Each holds a different kind of interest, and a license has to respect all of them.
The rights map below is a starting point for a review. It describes the usual position, not the answer for any specific meeting.
| Party | What they may hold | What to check |
|---|---|---|
| Your company (account owner) | Contractual control of recordings and transcripts under the vendor terms | Who administers the workspace and who owns the account |
| Employees using personal notetaker accounts | Copies held under the individual's own vendor agreement, outside company admin control | Whether staff recorded work meetings on personal or free accounts |
| Employees who spoke | Privacy interests in their voice, words and identity | Employee notices, handbook language and state law |
| Customers and partners on the call | Confidentiality rights under NDAs or MSAs, plus personal data | Whether the call discussed their confidential information |
| Candidates and other outsiders | Personal data and recording consent rights | Whether they were told about the notetaker |
| Notetaker vendor | A license to process content, sometimes to improve its own models | Data use clause, admin training settings, export terms |
| Meeting platform | Terms on recordings and on bots joining meetings | Platform rules for third-party recorders |
What the notetaker vendor's terms decide#
Notetaker vendor terms decide whether your company can export transcripts in a usable form and whether the vendor has already used them for its own purposes. Some vendors reserve a right to use customer content to improve their models unless an admin turns it off, and others restrict using exported content to build competing products.
Read the current terms and the settings page together, because the default can differ by plan and the admin may have changed it. Record what the terms said at the time each recording was made, since terms change over time.
- Ownership clause: does the customer own its content, or only receive a license to it?
- Vendor use: may the vendor use transcripts to train or improve its own models, and was that setting on?
- Export: are transcripts, speaker labels, timestamps and summaries available through an API or bulk export?
- Downstream restrictions: do the terms limit what you may do with exported content?
- Retention: how long are audio and transcripts kept, and does deletion in the app reach backups?
- Subprocessors: which third parties processed the audio for transcription?
How recording consent works across states#
Recording consent in the US is set mainly by state law. Some states require every participant to consent to a recording, while others require only one participant's consent. A call that includes people in different states can bring the stricter rule into play, which is why many companies apply an all-party notice by default.
At least one widely used notetaker vendor has been sued in the US over bots that allegedly recorded people who had not agreed, and over the use of those recordings to train the vendor's own models. Those are allegations against a vendor, not findings about their customers, but they show why both the recording notice and the vendor's training setting belong in any review of an archive.
Notetaker bots that join a meeting and announce themselves, or show a recording banner, are one way companies give notice. Whether that notice was adequate for a given call, and whether people outside the company had a meaningful chance to object, is assessed with counsel.
Consent to record is not consent to license. An employee who knew a standup was recorded for note-taking did not necessarily expect the transcript to reach an outside AI developer. That gap is closed with clear employee notices going forward, de-identification, and careful scoping of historical recordings.
Which transcripts are worth licensing?#
Transcripts are most useful to AI developers when they capture how a team reasons through a problem and connect to a record of what happened next. An incident review that references the Jira issue, the pull request and the fix is far richer than an unlinked conversation.
| Meeting type | Licensing outlook | Why |
|---|---|---|
| Incident retrospectives | Strong candidate | Reasoning about causes, linked to incident records and fixes |
| Design reviews and sprint planning | Strong candidate | Trade-off discussions tied to issues and product decisions |
| Support escalation huddles, internal only | Candidate after review | Customer names and details need removal |
| Calls with customers present | Usually excluded | Customer confidentiality and outside-party consent |
| Sales and discovery calls | Usually excluded | Prospect personal data and deal-specific confidential details |
| HR, legal and board meetings | Excluded | Personnel matters, privilege and governance confidentiality |
| Candidate interviews | Excluded | Candidate personal data and employment law sensitivity |
Preparing transcripts for a license#
Preparing notetaker transcripts means removing personal and confidential details while keeping the structure that makes the conversation useful. Names become role labels such as engineer or support lead, customer names become placeholders, and email addresses, phone numbers and account identifiers are removed. Ticket and pull request references can stay if they point to records in the same package.
Automated detection is a first pass, not a finish line. The open-source Presidio project states in its own documentation that automated detection gives no guarantee of finding all sensitive information and that additional protections should be used. Spoken language makes this harder, because people spell names aloud, mention customers casually and speak over each other, so sampled human review is part of the process.
Generated summaries and action items need the same treatment as verbatim text. A summary can name a customer or a struggling employee in a single line.
Illustrative: an analytics software company sorts its notetaker archive#
Illustrative: a fictional analytics software company has used a notetaker connected to Google Meet and Zoom for several years. The archive holds standups, incident reviews, customer calls and interviews in one workspace.
The general counsel starts with the vendor terms and confirms the company owns its content and can bulk export transcripts. Using calendar metadata, the team keeps only meetings where every attendee had a company email address, drops anything titled or tagged as HR, legal, interview or board, and excludes recordings from before the employee notice was added to the handbook.
What remains is a set of engineering and product meetings, many referencing Linear issue keys. After de-identification and sampled review, the company decides to include those transcripts in a package alongside the linked issues, and to keep customer-facing calls out entirely.
How SourceX approaches meeting records#
SourceX starts with a metadata-only fit check: which notetaker and platforms were used, the meeting categories, the date range and the notices in place. No transcripts are shared at that stage. In the Rights step of the SourceX five-step transaction, vendor terms, employee notices and outside-party exposure are reviewed before any Preparation work begins.
The de-identification method, review sampling and exclusions are recorded in the SourceX Evidence Packet as the privacy record, alongside provenance, licensing rights, permitted use and release authorization. The supplier signs off on the final scope before Delivery begins.
Frequently asked questions
Does the notetaker vendor own our transcripts?
Usually not. Most business notetaker terms say the customer owns its content and the vendor receives a license to process it. Some vendors also reserve rights to use content to improve their own models, so check whether that applied to your account and when, because it affects what a licensee can be promised.
Are AI-generated summaries treated differently from verbatim transcripts?
The rights analysis is usually the same, because summaries are derived from the same conversation. Summaries can be riskier in one way: they condense the most sensitive points, such as a named customer complaint or a performance concern, into a few lines. Review them with the same care as full text.
Can we license the audio as well as the text?
Audio carries voices, which can identify people even after names are removed, and some laws treat voiceprints as biometric data. Most text-first packages leave audio out. If a buyer wants audio, it needs its own consent and privacy review.
What about transcripts that include employees who have since left?
Former employees keep their privacy interests. The notice they received while employed matters, as does de-identification. Many companies exclude meetings where a departed employee's personal circumstances were discussed, and rely on role labels for ordinary work conversations.
Does one outside guest change the status of an internal meeting?
Often yes. An outside guest brings their own consent position and possibly their employer's confidentiality rights. The simplest rule is to exclude any meeting with a non-company attendee unless the guest's participation was minor and the content can be reviewed and cleared.
What about transcripts employees made with personal notetaker accounts?
Leave them out of any package. A transcript captured on an employee's personal or free account sits under that person's agreement with the vendor, often on consumer terms, not under your company's admin settings or data use clause. The company does not control those copies, so it cannot license them. Ask staff to move work meetings to the company workspace going forward.
Sources
- Presidio's documentation warns that because it uses automated detection mechanisms, there is no guarantee it will find all sensitive information, and additional systems and protections should be employed. Source
Related resources
- DataSales call transcripts
- QuestionCan I license call recordings?
- InsightWhy call-recording lawsuits over AI matter before you license call data
- InsightAI meeting notetakers and consent: transcripts you may not be able to license
- InsightCall recording consent vs consent for AI training: not the same thing
- IndustryBPO & contact centers data
See if your company qualifies
A short company assessment. No data uploads are needed.