Taking notes in confidential meetings

Each one is a place the conversation could leak from, be subpoenaed from, or be kept longer than you intended.

The practical rule is to keep that list short and know every entry on it. This guide walks through where copies go, how to reduce them, and what to decide before the meeting starts.

Start with the question: does it need recording at all

The strongest confidentiality measure is not creating the copy. For many confidential meetings, a better record is:

1. Brief notes taken during the meeting.
2. A written summary sent afterwards: what was decided, who does what.
3. The other side's confirmation that the summary is accurate.

That gives both sides an agreed record without a recording anyone has to protect. Record when you need the exact words — a technical discussion, an interview, a complex negotiation — and when everyone has agreed.

If there is an NDA, read what it says about recording, note-taking and sharing with third parties. Some restrict disclosure to named people or organisations, which can include service providers.

Map where the copies go

For each confidential meeting, list every place each of these ends up:

Then look at who controls each entry, under what contract, in what country, and for how long. Where does your meeting audio go? turns this into questions to put to any vendor.

Keep the list short

Fewer vendors

Every service that receives the conversation is another party with a copy, a retention policy and staff who can in principle access it. The main reductions:

• No bot in the call. A bot sends the full meeting stream to its vendor. A recorder on your own computer does not add a participant. Bot-free meeting notes compares the two.
• Transcribe on the device. If speech recognition runs on your computer, the audio never goes to a transcription service.
• Send text, not audio, when you use AI. A summary can be written from the transcript alone. Audio carries voices and background conversation that the summary does not need.
• Choose one place for the notes, not a notetaker's cloud plus a drive plus email.

Retention decided in advance

Decide before the meeting how long each thing is kept, and write it down:

• Audio: often shortest — long enough to check the transcript.
• Transcript: as long as you need to refer to the exact words.
• Notes: as long as the matter or relationship needs them.

Then delete on schedule. A retention rule nobody applies is not one. For meetings involving personal data in the EU or UK, retention is also a legal requirement — see recording meetings under GDPR.

Audio out of backups

Backups are where deleted things survive. If your computer backs up automatically to the cloud, the meeting audio goes with it unless you exclude it. The audio is the most sensitive copy and usually the least needed later. Keep it out of backups unless there is a reason to keep it, and check that any backup of the notes is encrypted in a way the backup provider cannot read.

Privileged conversations

Conversations with lawyers raise an extra question: whether sharing them with a third party — including a service provider — affects privilege or confidentiality. That is a question for counsel, not a notetaker vendor. AI notetakers and attorney–client privilege sets out the questions to ask.

Before, during and after

Before

1. Decide whether a recording is needed.
2. Check the NDA or engagement terms.
3. Tell the other side how you take notes and ask if they agree.
4. Decide retention for audio, transcript and notes.

During

1. Say at the start that you are recording, if you are.
2. Stop the recording when the part you need is over.

After

1. Check the transcript and notes.
2. Send the summary only to the people who need it.
3. Delete the audio when its retention period ends.

How Notey fits in

Notey is a Mac app that records your microphone and the sound your Mac plays as two tracks and transcribes them on the Mac. For confidential meetings it shortens the list in specific ways:

• No bot, no transcription vendor. Nothing joins the call. Audio is written to your disk and transcribed there. It is not uploaded, and there is no fallback, debug mode or crash report that sends it.
• Nothing leaves without an account. Recording, transcription and search work with no account and no network.
• AI notes are optional and text-only. If you ask for a summary, the transcript's text is sent to Notey's service and on to OpenAI as a processor. It is not used for training and not retained by Notey. For a meeting you would rather keep entirely on the Mac, do not ask, and leave automatic write-ups off.
• Sync between your own Macs is optional and encrypted on the Mac with a key only your Macs hold. Recordings stay on the Mac that made them and are never uploaded, not even encrypted.
• Deleting a meeting removes its recording, transcript and notes, and with sync on, from every one of your Macs.

It does not protect a laptop that is lost unlocked, and it cannot control what happens to notes you send on. Use FileVault and a strong login, and treat exported notes like any other confidential document.

Frequently asked questions

Should I record a confidential meeting?

Only if everyone has agreed and a record is actually needed. For many confidential conversations, handwritten notes and a written summary the other side confirms are enough, and leave nothing else to protect.

What is the safest way to take notes in an NDA meeting?

Keep the number of copies small. Check what the NDA says about recording and third parties, use as few outside services as possible, decide how long you will keep each thing before you start, and delete it on schedule.

Does on-device transcription make notes confidential?

It keeps the audio off a transcription vendor's servers, which removes one copy. It does not protect the laptop, the backups, or anything you later send elsewhere. Confidentiality depends on every place the notes go.

Should meeting audio be included in backups?

Often not. The notes and transcript are usually what you need to keep; the audio is the most sensitive copy and the one most often kept by accident. Keep it out of backups unless there is a reason to keep it.