The NDA Test Your AI Notetaker Fails
A two-minute check for consultants: does your AI notetaker send client audio to a vendor's server, and does that quietly break the NDA you signed?
Most AI notetakers send meeting audio to a vendor's cloud server — a third party your NDA never named. Before your next client call, check where the audio goes: if it leaves the device, you need consent, and in twelve US states you need it from every participant just to record.
You are forty minutes into a discovery call under a mutual NDA when your notetaker's icon shows up in the participant list — a bot, uninvited, quietly uploading the client's confidences to a server neither of you signed for. Meetly's answer is to stay off that list entirely: record on your phone, transcribe on your phone, and keep the conversation exactly where the NDA assumed it would stay.
The two-minute test that fails most notetakers
Before your next client call, run a two-minute test. Ask your notetaker three questions: does it join as a visible bot in the participant list, does the audio leave your device, and does a vendor keep a copy of the transcript on its own servers. If any answer is yes, you have a fourth party in a conversation your NDA never authorized.
Why NDAs and AI notetakers collide
Your NDA lists two parties: you and the client. A cloud notetaker adds a third, the vendor whose servers hold the recording, without ever appearing in the signed agreement. When AI-implementation consultant Lilach Bullock checked her own calendar, nine of her last fifteen client calls had an AI notetaker present, and four of those disclosed it to no one on the call.
The implications are significant, leading companies to face exposure to internal leaks, cybersecurity vulnerabilities and potential breaches of NDAs.
Renata's discovery call: same conversation, one fewer party
Renata runs discovery calls for a boutique operations consultancy, each one covered by the client's mutual NDA. She used to mute her cloud notetaker, worried it would ping the client's IT team. Now she presses record on her phone, transcribes on-device, and turns the conversation into an engagement debrief memo before she leaves the parking lot.
What "on-device" actually means
On-device means the recording and the transcription both happen on your phone; nothing about the conversation reaches a server until you ask for something more. Meetly's privacy documentation states plainly that it records and transcribes locally, and that optional AI summaries send transcript text, never audio, to a processor bound by a zero-data-retention contract, or nothing at all.
If no privacy-compliant AI endpoint is available, Meetly fails closed instead of silently sending the meeting somewhere else.
The consent layer your NDA doesn't cover
An NDA governs what the client tells you. It says nothing about the separate legal question of recording consent. Twelve US states require every participant's consent before a conversation can be recorded at all, NDA or not. Skip that check and the confidentiality clause you were trying to protect becomes the least of your problems.
- California — Penal Code § 632
- Connecticut — Gen. Stat. § 52-570d
- Delaware — Code tit. 11, § 1335
- Florida — Stat. § 934.03
- Illinois — 720 ILCS 5/14-2
- Maryland — Cts. & Jud. Proc. § 10-402
- Massachusetts — Gen. Laws ch. 272, § 99
- Montana — Code Ann. § 45-8-213
- New Hampshire — Rev. Stat. § 570-A:2
- Oregon — Rev. Stat. § 165.540
- Pennsylvania — 18 Pa. Cons. Stat. § 5704
- Washington — Rev. Code § 9.73.030
Statute citations from Recording Law's 2026 state consent guide. If your client sits in any of these states, say out loud that you are recording, every time, regardless of what tool you use.
What to check before your next client call
Run the two-minute test at the start of a client relationship, not after a slip. The table below is that same check, written down: what a typical cloud notetaker does with the recording, against what stays on your phone when the app is on-device by design.
| Check | Typical cloud notetaker | On-device (Meetly) |
|---|---|---|
| Where the audio goes | Uploaded to the vendor's server | Never leaves your phone |
| Who can access the transcript | Vendor staff, integrations, sometimes model training | Only you, unless you share it |
| New party to the NDA | Yes — the vendor | No third party added |
| All-party consent still required | Yes, in the 12 states above | Yes, in the 12 states above |
Run the two-minute test on your next client call.
Try Meetly freeFAQ
Does signing an NDA mean I can't use any AI notetaker?
No — an NDA restricts what you disclose to outside parties, and whether an AI notetaker counts as an outside party depends entirely on where the audio goes. A tool that transcribes locally and never uploads the recording doesn't introduce a new party to the conversation; a cloud notetaker that stores the recording on a vendor's server does, and Pillsbury Propel's March 2026 review found that such arrangements lead companies to face exposure to internal leaks, cybersecurity vulnerabilities and potential breaches of NDAs. Before your next confidential call, ask the vendor directly where the audio is processed and stored, and get that answer in writing if the client's counsel will ask for it. The safest default under an NDA is a tool that keeps the recording on the device that made it.
Which US states require every participant's consent to record a call?
Twelve states apply all-party consent rules to recorded conversations: California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Oregon, Pennsylvania and Washington, each under its own wiretapping or eavesdropping statute, for example California's Penal Code section 632 or Washington's Revised Code section 9.73.030. In these states, recording a call, including with an AI notetaker, without telling every participant and getting their agreement is a separate legal risk from any NDA violation, and in some states it carries criminal penalties. If your client is based in one of these states, say out loud that you are recording and note the moment they agree, regardless of what tool you use.
How do I still get usable notes without a bot in the meeting?
Recording on your own phone works the same as a meeting bot for the parts that matter: you still get a full transcript, speaker by speaker, without adding a vendor's server to the call. After the call, an agent can turn that transcript into the summary you actually need, a debrief memo, a list of open items, a set of decisions, the same job a cloud notetaker's dashboard does, minus the third party. The visible difference to the client is that nobody sees a bot join the call; the practical difference is that the recording never leaves the room until you decide what to do with it.
What does Meetly send to the cloud, if anything?
Nothing, by default. Meetly records and transcribes entirely on your iPhone, iPad or Mac; the audio never leaves the device. If you ask for an AI summary, a Pro subscription feature, only the transcript text, not the audio, goes to a processor under a zero-data-retention contract, and Meetly fails closed rather than sending your meeting to an unapproved endpoint if that contract isn't in place. For a client call under NDA, that means the part that matters, what was actually said, in the speaker's own voice, stays on your device the entire time.