| An AI meeting assistant is software that listens to a meeting and produces a transcript, a summary or action items. The output can hold personal information about everyone who spoke, so it needs notice, access rules and a retention period. |
An AI meeting assistant turns spoken discussion into notes, transcripts or action lists. Some tools join as a bot; others work inside the meeting platform or through an app. Before using one, agree what it may capture, tell attendees, control access and set retention rules for the information it creates.
The account holding a transcript does not by itself determine its legal ownership. Check the employer’s policies, the meeting and client arrangements, and the provider’s terms. For business records, name who is accountable for access, retention and handover, even when a file is stored in an employee’s work OneDrive.
Picture a client call where an unfamiliar participant joins and starts recording. A staff member signed up for an AI meeting assistant with a work email address and accepted its standard terms. Nobody has reviewed where the audio goes or when it is deleted. The Privacy Act 2020 applies to that capture as it would to a person taking notes.
What is an AI meeting assistant?
Also sold as an AI note taker, it comes in three forms. Native features run inside the meeting platform, such as Copilot in Microsoft Teams, Gemini in Google Meet and Zoom AI Companion. Bots join the call as a participant and send the audio to their own service. Apps and devices capture audio on a laptop or phone.
What an AI meeting assistant leaves behind depends on the product and its settings. A recorded Teams meeting can produce a recording, a transcript and an AI recap. Copilot can also be used during a Teams meeting without saving a recording or transcript, although Microsoft notes that prompts and responses may still be retained under the organisation’s compliance policies. No saved recording does not mean no stored personal information.
How accurate is an AI meeting assistant?
It varies with the tool, the room and the speakers. Speech recognition, speaker labelling and summarising each add errors that carry forward. Test New Zealand English, te reo Māori names, your technical vocabulary and overlapping speech in the actual tool.
A summary can select or infer incorrectly, turning a tentative comment into a settled decision. Have a person check decisions and action owners before the summary circulates.
Should you use a built-in assistant, a bot or an app?
Check the approved platform you already use first. A native AI meeting assistant can simplify administration because it sits inside a service your business already manages, but it still needs checks of the exact feature, licence, contract terms, sharing and processing.
A bot sends audio to a separate provider under its own terms. The risk is less a missing contract than an unapproved account or terms nobody reviewed. App capture is the hardest to see, because a recorder on a laptop may not appear in the participant list. A bot-free AI meeting assistant still processes audio somewhere, so assess the actual capture method and terms.

The built-in option our clients meet first is Microsoft Copilot, which covers far more across Microsoft 365 than meeting notes.
What should you check before approving an AI meeting assistant?
- Who accepted the terms. A company account under an approved agreement, or one person’s sign-up
- Administrative control. Who can add users, change settings, export data and close the account
- Processing and storage. Where audio, transcripts and summaries are processed and stored
- Secondary use. Whether the provider uses your content for its own purposes, including training
- Subprocessors and sharing. Which other companies receive the audio, and what is shared by default
- Breach support and exit. How incidents are reported and what happens to the data when the plan ends
Lobby settings and app restrictions reduce unapproved AI meeting assistant bots, but cannot stop a recorder on a device. An approved tools list and staff training cover the rest.
Do you need to tell people before an AI meeting assistant records?
Yes, though the Privacy Act frames it as notice rather than blanket consent. Under information privacy principle 3, an organisation collecting personal information directly from a person must take reasonable steps to make sure the person knows about the collection, its purpose, the intended recipients, who collects and holds it, and their rights of access and correction.
For an ordinary business meeting, tell attendees before an AI tool captures their information. Explain the purpose, the intended recipients and where to find the full privacy notice. Agree a practical alternative for objections. Your organisation must also check that collection is necessary, fair and consistent with any employment, client or sector requirements. Permission and notification should be addressed in the approved workflow.
A short announcement is not automatically a complete notice. Notice after capture is for cases where prior notice is not practicable, not a normal shortcut.

A short reminder. It does not replace the full privacy notice.
What should you say before capture starts?
Put the practical points in the invitation with a link to the full privacy notice, then repeat them before capture: that the AI meeting assistant is recording or transcribing, why, where the record will be kept, who receives it and how to object.
Can someone refuse to be recorded?
Yes, and the meeting can still go ahead with the assistant off and minutes taken by hand. Sensitive discussions are a policy decision for your business. A sound default is not to record performance, disciplinary, health or legally privileged conversations unless an approved exception applies, with your privacy lead and HR or legal adviser involved where the context warrants it.
What about people who are not in the meeting?
Meeting notes can include personal information about people who were not in the room. Information privacy principle 3A has applied to indirect collection since 1 May 2026, covering information collected from someone other than the individual, such as a client describing a third party or another organisation’s transcript.
If your business collects that information indirectly, consider IPP 3A and its notification requirements. Someone already informed through an appropriate notice may not need another notice, but that depends on the facts and the available exceptions. Do not assume every name mentioned requires a separate message.
A provider processing information solely on your behalf is an agent under section 11 of the Privacy Act, so your business stays accountable; check its actual role and uses. Offshore storage by an agent differs from disclosure overseas, and New Zealand-only storage is not a universal Privacy Act requirement.
Where are meeting recordings and transcripts stored?
Teams meeting recordings generally save to the organiser’s work OneDrive; channel recordings save to the channel’s SharePoint site. One-to-one and group-call recordings use the recorder’s OneDrive, and fallback arrangements apply when the organiser has no OneDrive (Microsoft Teams recording storage and permissions). Confirm the meeting type and host organisation before promising where a record will land.
A meeting organised by a client may store its recording under that client’s control, and a storage location does not determine legal ownership. Emailed summaries and downloads need the same access and retention decisions as the original.
Cameras and microphones in the room are covered in meeting room technology.
Who can open a meeting transcript afterwards?
For a standard Teams meeting, invitees from your organisation receive access while external participants have none until the organiser shares it. Channel meeting access follows channel permissions, and some advanced access options depend on licensing. Before a board or HR meeting, have an administrator verify the settings rather than relying on the invitation list.
Is our meeting data stored in New Zealand?
Verify the data locations for the relevant services, rather than assuming one tenant location covers every recording, transcript and AI output. Check storage at rest, processing, subprocessors and any external meeting host separately.
What happens to meeting records when a staff member leaves?
They follow whatever offboarding does with that person’s OneDrive, so name a records owner. Do not assume recordings will land in a shared library on their own; define the transfer method and permissions. Microsoft notes that moving or copying a recording can affect its captions, so test playback, the transcript link and access first.
How long should a business keep meeting transcripts?
Only as long as the information is needed, and an AI meeting assistant transcript can hold a lot of it. Information privacy principle 9 says personal information must not be kept longer than required for the purposes it may lawfully be used for. Decide the purpose and period for each record type, with holds and exceptions. Raw audio may be needed for less time than approved minutes, and a summary and transcript do not necessarily share a deletion date.
Periods such as 30 days for internal catch-ups or 12 months for project meetings are examples to assess, not standard legal periods.
Teams can expire recordings and transcripts automatically after a default period administrators can change (Teams meeting recording options). Expiry is a storage feature rather than a compliance control, and retention policies and holds can keep items, so avoid promising an exact permanent-deletion date.

Does deleting the transcript delete the recording?
Not necessarily. Microsoft documents standalone transcripts and recordings with associated transcripts, and a transcript stored with its video cannot be targeted separately for retention. Do not assume deleting a transcript also removes the recording, AI notes, copied text or exported files. Test recording-plus-transcript and transcript-only meetings, and include summaries, emails and downloads in the retention design.
What should an AI meeting assistant policy cover?
Six decisions, placed inside the AI acceptable use policy your business already keeps.
Approved tools
Name the approved AI meeting assistant and any third-party product that has passed your checks.
Who may start capture
Who may record or use AI notes, and who is accountable for the record.
Notice wording
Invitation text and the words said before capture, linked to the full notice.
Sensitive meetings
The default for performance, disciplinary, health and privileged conversations.
Access and records owner
Who can open each record type, where copies live and who owns them.
Retention and disposal
Set a period for each record type, how holds work and how disposal is tested.
How should access requests and corrections be handled?
A person can request their personal information, including relevant recordings or notes. That does not automatically entitle them to the complete unredacted transcript or only their own spoken lines. Assess the information about them, third-party privacy, privilege and lawful withholding grounds, and include a correction process for inaccurate AI output.
When should the policy be reviewed?
At least once a year, and again each time a platform changes a default or a new AI meeting assistant appears in the tenant. The same questions apply to prompts and generated output outside meetings, covered in AI data security.
Which licences does an AI meeting assistant need?
It depends on the feature. Standard recording and transcription, AI recap and broader Copilot use are different requirements. In Teams, intelligent recap needs an eligible subscription plus a Teams Premium or Microsoft 365 Copilot licence for each user who needs it, so licensing only the organiser does not give every attendee recap access. Identify who needs to create, use or view AI features, then check their licences.
Teams can also start recording and transcription automatically where policy and meeting options allow it, so check recurring meetings before relying on someone to press record.
What affects the cost of an AI meeting assistant?
Check the approved platform you already use first. Confirm the required feature is included or price the add-on, then compare alternatives against a specific unmet need.
| Cost driver | What to check |
|---|---|
| Feature licences | Who needs to create, use or view AI features, and which licence each person needs |
| Platform tier | Whether your current plan includes recording and transcription |
| Setup and policy work | Approved tools, notice wording, access settings and retention rules |
| Storage | Where recordings accumulate and whether retention keeps them longer than expected |
| Ongoing review | Checks that platform defaults have not changed and disposal still works |
The benefit is released staff time rather than cash savings. Measure preparation, correction and filing time in a short pilot on real meetings. Exodesk scopes this as an AI solutions project covering tool choice, settings, notice wording and retention.
Is a free AI meeting assistant good enough for business use?
Assess the actual plan terms and controls. Payment alone does not establish privacy suitability, so check who accepts the terms, what the provider can do with the content and how it is deleted.
How can Exodesk help?
Exodesk has supported New Zealand businesses since 1989. Today, our Christchurch and Dunedin teams support businesses nationwide. Exodesk helps configure approved access and retention settings and test how they work, including offboarding and exceptions. We confirm the licences required for automated retention before including it in scope.
NEXT STEP
Get control of your meeting records
Tell us which meeting tools your team uses and which meetings need a record. We will review the settings, notice wording and retention rules, and scope the setup.
Frequently Asked Questions
Do you have to tell people an AI meeting assistant is recording?
For an ordinary business meeting, yes, tell attendees before capture starts. Information privacy principle 3 requires reasonable steps so people know about the collection, its purpose and who will receive the information. A short announcement helps but is not a complete notice on its own, so link to your full privacy notice in the invitation.
Does Microsoft Teams record and transcribe meetings automatically?
It can. Organisers can set a meeting to record and transcribe automatically when the administrator policy makes that option available. Check automatic capture and recurring meetings before relying on someone to start it manually.
Can you use Copilot in Teams without recording the meeting?
Yes. Microsoft lets organisers set Copilot to work only during the meeting, without saving a recording or transcript. Copilot prompts and responses may still be retained under your compliance policies. No saved recording does not mean nothing is stored.
Who owns a meeting transcript?
The account holding a transcript does not by itself decide its legal ownership. Employment terms, client arrangements and provider terms all matter. For business records, name who is accountable for access, retention and handover.
Can a client ask for a copy of a call they took part in?
A person can request the personal information your business holds about them, which can include recordings or notes. That does not automatically entitle them to the complete transcript, because information about other people and lawful withholding grounds must be considered. Plan the search, review and redaction process before a request arrives.
Are bot-free notetakers more private?
Not necessarily. No visible participant does not mean audio is not processed or retained. Assess the actual capture method, the provider terms and where the data goes.
Does deleting a Teams transcript delete the recording?
Not necessarily. Behaviour depends on the service and the action used, and summaries, emails and downloads may sit elsewhere. Test each artefact and deletion path before relying on it.
Does every attendee need an AI licence?
Not every attendee necessarily needs an extra AI licence, but entitlement depends on the product and feature. Teams intelligent recap is licensed per user, so licensing only the organiser does not give every attendee recap access. Identify who needs to create, use or view AI features, then check their licences.
How long should meeting transcripts be kept?
Only as long as the information is needed for a lawful purpose, under information privacy principle 9. Set a period for each record type, with holds and exceptions. Raw audio, transcripts and approved minutes do not need the same deletion date.
Can Exodesk set up an AI meeting assistant for our business?
Yes. Exodesk has supported New Zealand businesses since 1989, and our Christchurch and Dunedin teams support businesses nationwide. We configure approved access and retention settings and test how they work, including offboarding and exceptions.
Contact us or call 0800 396 337 to talk about AI meeting assistants.

