AI note taker privacy concerns: where recordings go, who sees them and model training

AI note taker privacy concerns: the three questions to ask

The privacy concerns about an AI note taker come down to three questions: where recordings and transcripts are stored, who receives the notes after a call, and whether meeting data trains the vendor's models. The table shows where each vendor keeps meeting data.

Where recordings and transcripts are stored

Krisp's privacy policy says it primarily processes and stores information in the United States. Krisp's help center says recordings are kept in the cloud, and that meetings are transcribed in the cloud with the data used for transcription deleted immediately after processing.

Krisp keeps recordings in its cloud until you delete them, and its Enterprise plan adds a choice of data center location. The guide to whether Krisp is legit covers the company behind it.

Deleted meetings stay in Trash for 30 days. To delete one for good, open Trash and click Delete forever. That is irreversible: Krisp says a permanently deleted meeting can't be recovered. A team Admin can also enforce an auto-delete period, after which team members' meetings are permanently deleted.

Who receives the notes after a call

Krisp's Auto-Share can send notes to everyone on the calendar invite, external guests included. The team default is User's choice, and an Admin can enforce one option for the whole team under Settings, Admin Settings, Sharing. Sharing one meeting by link works for anyone who opens it, whether or not they are signed in to Krisp, while Invite only limits access to people invited by email. The meeting owner can check who has access and revoke it.

In Microsoft Teams, guests and external attendees can view a recording only if it is explicitly shared with them. Google Meet offers three sharing options for its notes: all invited guests, including people outside the organization; invited guests in the organization; or hosts and co-hosts only. AI note taker consent covers telling people the notes exist.

Model training and outside providers

Krisp says meeting data is not used to train its models, while its privacy policy lists model improvement as a purpose based on consent. Krisp's privacy policy also says it may share meeting content with its third-party service providers, for example to write summaries.

Granola's pricing page says it trains on your anonymized data, lists an opt-out of model training on Basic, and adds a team-wide opt-out on Enterprise. Krisp vs Granola sets the two side by side.

Security risk: certifications and admin controls

Krisp says its data is encrypted at rest with AES-256 and in transit with TLS 1.3, and its comparison table ticks SOC 2 Type II and GDPR on every plan. Advanced and Enterprise add admin controls: disable auto share, link access control and Enforce recording mode. Krisp lists SSO and SCIM on Enterprise only, and Otter.ai lists SSO only with a minimum 100-user license.

A team that stays inside Microsoft Teams or Google Meet adds no second store: Teams recordings go to the organizer's OneDrive or SharePoint, and Meet notes follow the organization's retention policy. A team that does not want audio kept should look at Granola, which deletes audio after transcription. Read Krisp's Privacy & Consent settings during its 7-day free trial, which needs no credit card.