The AI Notetaker Records Everyone in the Meeting. One Person Clicked Yes.

Somewhere in your company this week, an AI notetaker joined a meeting. It captured every word from every person on the call, including the client, the vendor, and the person who never agreed to anything. Then it wrote a summary, saved a transcript, and, depending on one checkbox, may have emailed all of it to everyone on the calendar invite. The terms that govern all of those words were accepted by exactly one participant.

This is day two of our week on the AI tools themselves. Day one covered what chatbots do with what your staff paste in. Notetakers raise a sharper question, because pasting exposes your own words. A meeting recorder captures everyone else's.

The bot that outstayed the meeting

The case that made this famous happened in the fall of 2024. An engineer left a video call with a venture firm, and the firm's AI notetaker kept doing its job. Afterward it automatically emailed the engineer the transcript, including what Fortune, citing Washington Post reporting, described as hours of the investors' private conversation after the engineer logged off, candid assessments of the firm's own problems included. The same coverage collected similar stories, including a workplace grant-meeting transcript sent to every attendee after a few participants stayed behind to talk privately.

That is not a malfunction. It is the product working as configured. One widely used notetaker's own help pages describe settings that will "automatically join all calendar events" with a valid meeting link and automatically share the conversation "with all guest participants on the calendar event invite." Whether those switches are on is decided by the person who installed the tool, not by anyone else in the room.

What the notetakers' own terms say

As with the chatbots, the vendors' own pages are the source of record, and they differ more than most people assume. All of the following was accessed September 2, 2026.

Otter's privacy policy, effective June 16, 2026, says the company uses personal information to improve its services, "including training our proprietary AI technology on de-identified audio recordings and on transcriptions (which may contain Personal Information)." Its security page adds that the de-identification is automatic and that customer data is not used to train its third-party AI providers' models. Retention is "as long as necessary" for the policy's purposes. Otter is also, right now, the defendant in a proposed class action filed in federal court in August 2025, alleging that the notetaker joined meetings without the consent of participants and that recordings were used for AI training. Those are allegations, not findings. In August 2026 a federal judge allowed the core privacy claims to proceed past the company's motion to dismiss while trimming others, and the case is ongoing. Whatever the outcome, it is a clear sign that the plaintiffs' bar has noticed this category.

Fireflies' policy, updated March 6, 2026, takes the opposite position on training: "We do not use personal information for AI model training and we contractually prohibit our vendors from using this information for their own model training." Account data is deleted within 30 days of closing an account, its bot appears in the participant list by name, and an optional compliance setting sends attendees a pre-meeting notice and lets them opt out, in which case the bot does not join. Fireflies does face a separate biometric-privacy class action over its speaker-recognition feature, also at the allegation stage, so a friendlier training policy is not the same as no litigation exposure.

Zoom's AI Companion carries the sentence Zoom published after its 2023 terms controversy and still maintains on its support pages: "Zoom does not use any customer audio, video, chat, screen sharing, attachments or other communications-like content (such as poll results, whiteboard and reactions) to train Zoom's or third-party AI models." Account owners and admins control whether the feature is on, participants see an indicator when it is active, summaries are delivered by email, and admins can set summaries to auto-delete after a set number of days. Adoption is not fringe: Zoom's own investor remarks for the quarter ended April 2026 reported paid monthly active users of AI Companion growing 184 percent year over year.

Microsoft's Copilot in Teams, on work accounts, sits under the same commitment as the rest of the work-account suite: prompts, responses, and data accessed through Microsoft Graph are not used to train foundation models, under Microsoft's contractual commitments, including its data protection addendum. The detail owners miss is the transcript: the default admin policy requires a saved transcript for Copilot in meetings, and transcription covers everyone speaking, not just the person who wanted the recap. A temporary mode exists that processes speech without saving it.

Google Meet's note-taking, on Workspace accounts, falls under the Workspace commitment that content "is not human reviewed or otherwise used for Generative AI model training outside your domain without permission." Notes land in the meeting organizer's Drive, and a pencil icon plus a notice tells participants notes are being taken.

The pattern from day one repeats with a twist. Work-platform tools on business accounts inherit the business-tier terms. The standalone notetaker someone installed personally is its own vendor, with its own terms, and it walked into your client meeting through one person's calendar.

The rules layer: consent was never optional

Recording other people has been regulated since long before AI, which puts this squarely in the pattern of our nine-industry series: the rule already exists.

Federal law and most states, Virginia and the District of Columbia included, follow one-party consent: a conversation may be recorded if one party consents. Virginia's statute says interception is not an offense where a person "is a party to the communication or one of the parties to the communication has given prior consent," and classifies unlawful interception as a felony. But about a dozen jurisdictions require the consent of all parties, and one of them is Maryland, whose statute permits interception only where the person is a party and "all of the parties to the communication have given prior consent," as Maryland courts have applied it to oral communications where people reasonably expect privacy. For a business in the DMV, that is not a footnote: a routine call can have a Virginia host, a DC participant, and a Maryland client on it at once. Which state's rule governs a mixed call is a genuinely contested legal question and one for your counsel; the cautious practice is to behave as if the strictest rule on the call applies, which in practice means notice to everyone.

There is a professional layer on top. A New York City Bar ethics opinion issued in December 2025 addressed AI tools that record, transcribe, and summarize client conversations, concluding that clients must be notified and their consent obtained, and that lawyers should consider whether the tool trains on the data and whether the data can be deleted. That reasoning reaches any business that owes confidentiality, contractual or professional, to the people on its calls. If your engagement letters, NDAs, or license duties promise discretion, a third-party bot ingesting the client's words is a decision that deserves more than a default setting. The law firm piece covers that duty in detail.

The honest part

Criminal prosecutions over an office notetaker are not what shows up in the record. What shows up is quieter and closer to home: the transcript that emailed itself to the wrong audience, the client who learns their words went into a tool nobody told them about, and now a federal class action built on exactly this fact pattern. The exposure is embarrassment, trust, and civil claims before it is ever a regulator. In a referral business, the meeting that leaked is the story that travels.

Visibility comes before the bot policy

You cannot set a recording policy around bots you have not found. The first move is the inventory: which notetakers are joining meetings on your calendars, who installed each one, which account it runs under, personal or business, and whether auto-join and auto-share are on. That last checkbox is the difference between a private summary and the incident above. Second, one rule that removes the judgment call: client and confidential calls get recorded only with notice to everyone on the call, and only into a tool on the approved list. Third, an approved path, because the recap is genuinely useful and staff will keep wanting it: for most small businesses that is the meeting platform's own assistant, on the business account you already control, with retention set by your admin rather than by a stranger's defaults.

Where we fit, and where we do not

We are not lawyers, and what recording-consent law and your confidentiality obligations require is a question for counsel. We do not manage your calendars or your meeting platforms' licensing.

What we run is the discovery underneath. Our Managed AI Security service starts with a free AI Discovery: a light install, about a week of quiet observation, then a report of the AI tools, extensions, and agents found in use across your machines, notetakers included, with which accounts they run under, risk ranked in plain English. Nothing changes for your staff while it runs, and the report is yours whatever you do next. From there we enforce the approved list you set and keep watching as new tools show up. It supports the consent and confidentiality duties above; it does not satisfy them on its own.

The question worth asking this week

Not "should we ban notetakers." Ask the question the transcript incident turns on: do you know, today, which AI notetakers sat in your client meetings this month, and who they sent the notes to?

We work with small and medium businesses nationwide from our home base in McLean, Virginia. If you are in Washington DC, Northern Virginia, Maryland, or anywhere in the country and you want that answer to be a list instead of a shrug, book a free 15-minute call. The discovery is free, and the answer is yours either way.