Eight Questions to Ask an AI Transcription Vendor Before Client Use
Short answer. Before introducing an AI transcription service into confidential meetings, ask the vendor exactly what information it receives, where it is processed, who can access it, how long it remains, and whether it is used for model training. Also establish how deletion, security incidents, and changes to service terms are handled. Obtain answers that apply to the actual product, subscription, and configuration you intend to use.
- A vendor's general privacy statement may not answer questions about a specific transcription feature.
- Audio, transcripts, summaries, and account metadata may have different storage and deletion arrangements.
- Model training, subcontractor access, and cross-border processing deserve direct questions.
- Vendor answers should be documented before consent wording is finalized.
Start with the information the service actually receives
A vendor conversation should begin with the data entering the service, not with a demonstration of the finished summary. AI transcription may involve several distinct operations: capturing a live audio stream, transferring it to a processing environment, identifying speakers, generating text, and producing a summary. A meeting assistant may also collect participant names, email addresses, calendar information, or meeting metadata. These details matter when assessing whether a service belongs in a confidential working environment.
The following eight questions provide a practical starting point. They are intended for practitioners who need clear answers before telling clients or participants that an automated tool may be used. Ask the vendor to identify the relevant product, subscription tier, account settings, and processing features in each answer. If the vendor's response applies only to some configurations, request that distinction in writing.
Questions one and two: What enters the system, and where does it go?
Question 1: What information does the service collect during a meeting? Ask whether it captures continuous audio, selected audio, video, transcripts, speaker labels, meeting titles, participant details, or other metadata. Clarify whether recording and transcription can be separated. A vendor may advertise transcription without making clear that the underlying workflow temporarily processes audio or creates additional files.
Question 2: Where is each category of information processed and stored? Request the relevant hosting locations and details about external service providers or subprocessors. Ask whether processing locations differ between live transcription, summary generation, and support operations. A statement that data is encrypted does not answer where it travels or which organizations may process it.
- Request a description of the complete data flow.
- Identify any external speech-processing or storage providers.
- Ask whether different features use different processing locations.
Questions three and four: Who can access the material, and is it used for training?
Question 3: Which people and systems can access customer content? Ask about account administrators, vendor personnel, technical support, subcontractors, and other authorized users. Clarify whether access is routine, restricted to specific circumstances, or available when support is requested. Also ask whether access is logged and whether the account owner can inspect or manage permissions.
Question 4: Is customer content used to train, improve, or evaluate AI models? Ask about audio, transcripts, summaries, and feedback submitted through the service. Establish whether any opt-out is available, whether it applies by default, and whether the setting covers all product features and subprocessors. The phrase 'we do not train on customer data' should be clarified against the precise service and account terms that will govern use.
Questions five and six: How long is information retained, and can it be deleted?
Question 5: What are the retention periods for audio, transcripts, summaries, backups, and operational logs? Request the default settings and any options available to the account administrator. Temporary processing files may follow a different schedule from saved notes. If the vendor says data is retained only temporarily, ask for a specific explanation of the applicable period and the events that start it.
Question 6: What happens when the practitioner requests deletion? Ask whether deletion covers the source recording, generated transcript, summaries, shared copies, and backups. Establish whether the user can delete each item independently and whether a formal request is necessary for some categories. A deleted item disappearing from the dashboard does not, by itself, establish that every stored copy has been removed.
Questions seven and eight: What happens when something goes wrong?
Question 7: What security incident procedures apply to customer information? Ask how the vendor identifies and communicates incidents, what notification channels it uses, and what information it provides to affected customers. Determine whether the agreement specifies relevant responsibilities and whether the practitioner receives information in time to follow applicable reporting or professional obligations.
Question 8: What changes can affect the service after adoption? Ask how the vendor communicates changes to processing locations, subprocessors, retention, training practices, and product functionality. Also establish what happens if the subscription ends or the vendor discontinues a feature. A service that meets the practice's requirements today should not silently acquire a different data arrangement without an opportunity to reassess it.
Turn vendor answers into a documented decision
Record the vendor's answers in a short procurement note. For example, use eight numbered entries corresponding to the questions above, with a source document or contractual reference for each material answer. Mark unanswered questions clearly and identify who will resolve them. Marketing pages, sales conversations, and general product descriptions should not be treated as substitutes for applicable contractual commitments.
The procurement note should then inform the client-facing explanation. If the vendor confirms that audio is processed externally, the consent explanation should describe that arrangement accurately. If retention periods remain unclear, the practitioner should resolve that uncertainty before proposing a recording workflow. Consent wording should reflect the actual service rather than promises that the vendor has not made.
When the vendor cannot provide a clear answer
An incomplete answer is a decision point. A vendor that cannot explain whether meeting audio is retained, whether transcripts are used for model training, or who can access customer content may be unsuitable for a particular confidential setting. The seriousness of the gap depends on the information involved, the professional environment, and the available safeguards. A lower-cost subscription or attractive summary feature does not remove the need to understand these arrangements.
Before approving a service, compare its written terms with the practice's professional obligations, local rules, and organizational requirements. Ask the professional body or a qualified privacy adviser about unresolved questions. Keep a copy of the relevant vendor responses, agreement, and account configuration with the practice's procurement records. This creates a reference point if the service changes or the workflow is reconsidered.
Questions readers ask
Should vendors answer these questions before a free trial?
The questions should be addressed before any confidential client information is entered, including during a trial or demonstration using live material. Use fictional or appropriately de-identified examples when evaluating functionality.
What if a vendor provides answers only during a sales call?
Ask for written confirmation and identify the contractual documents that govern the service. A verbal assurance may be difficult to interpret later if the service configuration or commercial relationship changes.
How should a small practice compare two vendors?
Use the same eight questions for both and distinguish confirmed contractual commitments from optional settings or general statements. The comparison should prioritize confidentiality requirements over the number of automated features.
When should the questions be asked again?
Revisit them when the vendor changes its terms, introduces a materially different feature, changes subprocessors, or alters the practice's subscription or configuration.