Can you use an AI notetaker under a client NDA?

Whether you can use an AI notetaker under a client NDA depends on what that NDA says, not on the notetaker. This guide is for freelancers and consultants who have signed a client's non-disclosure agreement and want a notetaker in their Google Meet and Microsoft Teams calls: the clauses that decide it, the questions to ask the client, what to do if the answer is no, and how to meet a return-or-destroy clause at the end. It is not legal advice. NDAs differ from client to client, the law around them differs by country, and the wording of yours is what counts.

Does an NDA stop you using an AI notetaker?

Not usually by name. Most NDAs say nothing about notetakers; they say what counts as confidential, what you may use it for, who you may share it with, and what happens to it at the end. A notetaker records the call, sends the audio to at least one AI provider for transcription and summarising, and stores the result. Each of those steps touches a clause.

So the useful question is not "is a notetaker allowed?" but "does this NDA let me record what is said, hand it to service providers, and keep it until the end?"

Which NDA clauses matter for a notetaker?

Six of them. Read each one with a recording in mind.

Clause	What to look for	Why it matters for a notetaker
Definition of confidential info	"Disclosed orally", "in any form", "whether or not marked confidential"	If spoken words count, the recording and transcript are confidential information
Permitted disclosure	Who you may share with: "employees", "professional advisers", "subcontractors", "service providers"	The notetaker vendor and its AI providers handle the information; check they fit a category
Conditions on recipients	"Bound by obligations no less protective", "on a need-to-know basis"	You may need the vendor's terms to say it will not use or disclose the content
Purpose	"Solely for the purpose of" the project or evaluation	Notes for the project fit; a vendor training models on the content would not
Recording or tools	Any ban on recording, on "third-party tools", or on "AI" or "machine learning" services	A specific clause overrides everything above
Return or destroy	When it applies, whether it covers copies and notes, written certification, an exception for backups	It decides what you must delete at the end, and how you prove it

Two more are worth a glance. A clause on where data may be held, if there is one, applies to the notetaker's storage and its AI providers. And a breach-notification clause means you need to hear from the vendor if something goes wrong on its side.

What questions should you ask the client?

Ask in writing, before the first recorded call, and keep the reply with the contract. A short email does it:

Hi Tom,

I'd like to use a notetaker in our calls so I can send accurate notes and actions afterwards. Before I do, I want to check it fits our NDA:

1. Are you happy for calls to be recorded and transcribed for my notes?
2. The tool sends audio to an AI provider for transcription, under terms that exclude training on our content. Is a service provider like that acceptable under the NDA?
3. Are there calls, or people, you would want left out?
4. When our work ends, do you want the recordings and notes deleted, or returned first?

I can send you the tool's privacy policy and its list of providers.

Thanks, Priya

Only write the training sentence if it is true of your vendor. Questions to ask an AI notetaker about client data covers how to find out.

What if the NDA says nothing about recording?

Treat silence as a reason to ask, not as permission. The other clauses still apply: if spoken information is confidential and disclosure is limited to named groups, a recording sent to a vendor may still be a disclosure that needs the client's agreement.

Asking costs one email. Being found out costs the engagement. A client who says no today would have minded far more had they discovered the recordings later.

What if the client says no?

Then the notetaker stays out of their calls, all of them, including the ones you think are harmless. Take notes by hand and send them afterwards.

Two habits keep that clean. Switch the notetaker off for the whole recurring series rather than call by call, so a new occurrence cannot slip through. And note the client's answer next to the contract, so you do not ask again in six months as if it were new. How to tell clients who said yes is in how to tell clients you use an AI notetaker.

There is sometimes a middle way: the client's own tools. If their meeting platform records or transcribes the call, that copy is stored in their organisation's accounts under their own policies, and you can ask for the transcript or notes afterwards. Who keeps the notes when the client hosts explains where those files end up and what you can expect to see.

How do you meet a return-or-destroy clause?

List every place the call content lives, delete it there, then confirm in writing. For a notetaker that means:

• Recordings, transcripts, summaries and action items in the notetaker.
• Minutes you exported: PDFs, pasted emails, documents in your own drive.
• Copies in your downloads folder, email attachments and chat messages.

If the clause asks for certification, list what you deleted and the date. If it has a backup exception, say how long the vendor's backups keep deleted data and that they expire on their own. The full end-of-engagement routine is in the client offboarding checklist.

How does TrackHeros fit an NDA's requirements?

TrackHeros cannot tell you whether your NDA allows a notetaker. What it can do is give you precise answers for the clauses above, from its privacy policy:

What the NDA cares about	What TrackHeros does
Use only for the purpose	Your data is not used to train AI models. Transcription, summaries and answers go through OpenRouter, only to providers that keep no copy of the content and refuse to train on it: Google Cloud's Vertex AI, Amazon Bedrock as a backup for Claude models, and DeepInfra, Together AI or Groq for meetings in another language, or several. The search index is computed on Vertex AI directly
Who handles the information	The processors are listed in the privacy policy, with what each does, so you can show the client the list
Keeping it to one engagement	Each client's meetings sit in a sealed workspace. Every query is scoped to one client, and the assistant inside a client reads only that client's meetings
Calls that must not be recorded	Auto-join can be switched off for one meeting, a recurring series, or by default; "Remove the notetaker" takes the bot out of a live call
Return or destroy	Deleting a client removes its meetings, transcripts, summaries and recordings from the database, file storage and the meeting-bot service at once. Backups expire within 30 days and are never restored into a live account
Where data is held	The current regions for a client of yours are given on request

TrackHeros holds no security certifications and claims none. The four privacy promises are at /#privacy, and how the workspaces are kept apart is on client workspaces that never mix.