How AI meeting summaries work and how trustworthy they are

A person at a desk reviewing notes on a laptop after a video call, with a notebook open beside them
TL;DR

AI meeting summaries use speech recognition to transcribe your calls, then a large language model to compress the transcript into key points and action items. They are useful for routine calls but can misstate, paraphrase or misattribute actions. Under UK GDPR, recordings and AI-generated transcripts are personal data requiring a lawful basis, transparency with participants and controlled retention. Treat AI summaries as draft notes, review before forwarding, and check your vendor's data storage and model-training policies before you commit.

Key takeaways

- AI meeting summaries capture your call audio, convert it to text using speech recognition, then use a large language model to compress the transcript into key points, decisions and action items. - Transcription accuracy is typically cited at up to 95% in good audio conditions, but drops with background noise, accents or crosstalk, and the generative summarisation step can misstate or misattribute independently of that. - Under UK GDPR, meeting recordings and AI-generated transcripts are personal data. You need a lawful basis, must be transparent with participants, and must have a clear data retention policy. - Treat AI summaries as draft notes rather than official records. Review them before forwarding, especially for client commitments, HR conversations or anything with legal or commercial implications. - Before adopting any AI meeting tool, check where data is stored, whether it is used to train models, what security certifications the vendor holds, and what the retention and deletion defaults are.

A founder finishes a client call. Before she has closed the browser tab, an email lands: a summary of the conversation, three action items with names attached, a list of decisions made. She did not write it. Nobody on the call did. The AI note-taker that joined as a participant generated it automatically from the audio. It is mostly right. One action item is attributed to the wrong person. She forwards it to the client before she notices.

AI meeting summaries are now built into platforms that many owner-managed businesses already use. The decision about whether to adopt them has often already been made without anyone explicitly making it.

What is an AI meeting summary?

An AI meeting summary is a short written record generated automatically after a call. The tool joins the meeting, converts speech to text using automatic speech recognition, then uses a large language model to identify key points, decisions and action items. The result reaches your inbox or CRM within minutes of the call ending, without anyone on the team spending time writing it up.

Tools such as Zoom AI Companion and Read.ai work as virtual participants on calls. They record audio, transcribe it, then compress that transcript into a shorter narrative using two techniques: extractive, pulling out key sentences directly, and abstractive, rewriting the content in new words. The abstractive step is where interpretation happens, and where errors enter.

Vendors cite transcription accuracy of up to 95% in good audio conditions. That figure drops with background noise, strong accents or multiple speakers talking at once, and it says nothing about the summarisation step. The summarisation step uses the same class of generative models as ChatGPT, which means it can produce fluent, plausible text that diverges from what was actually said.

Law firm White and Case flags that AI meeting tools can “misstate, paraphrase or oversimplify key points”, and that recordings, transcripts and AI summaries may diverge from each other, creating inconsistencies about what was actually decided. If a client, an employee or a regulator later asks exactly what was agreed, that divergence matters.

Why does an AI meeting summary matter for your business?

The productivity gain is real for any service business running ten or more client calls a week. Post-call note-writing is automated, the summary arrives without anyone spending time on it. The risk sits on the other side: an AI summary treated as the official record of a meeting that later surfaces in a client dispute, an employment grievance or a regulatory inquiry is a different kind of problem.

White and Case’s analysis identifies four governance exposures when AI meeting tools run without policy: inconsistent records, privilege waiver, spoliation risk and data governance failures. For an owner-managed service business, inconsistent records are the exposure that tends to surface first in practice. A client who received the AI summary before a human reviewed it now has a document that may not accurately reflect what was agreed. If the relationship later sours, that document is available.

The corrective is to build human review into your process by default. The AI summary is a starting point. The follow-up email you send to the client after the call is the record.

Where will you actually encounter AI meeting summaries?

AI meeting summaries are already built into platforms many businesses use without choosing them specifically. Zoom AI Companion is included in many paid Zoom plans. Microsoft Teams has Copilot. Google Meet has its own note-taking features. Beyond the big platforms, dedicated tools like Read.ai join calls as bot participants and generate structured notes regardless of which platform the call runs on.

The practical consequence is that you may be generating AI meeting notes already on your own calls, or participants on the other side may be doing the same on theirs. Many tools notify attendees when recording is active, but the notification is typically a small banner rather than a clear opt-in.

For regulated sectors, dedicated tools are moving to fill a gap. YourStake has built an AI meeting assistant for financial advisers that integrates with planning workflows and includes compliance-oriented features, reflecting the reality that generic consumer-grade note-takers sit uneasily alongside sector regulation.

The ICO’s guidance on monitoring workers makes clear that auto-enabling AI recording for all calls, including informal staff conversations, requires a clear lawful basis and transparency with participants. Switching AI capture on by default across your account is not automatically the compliant choice.

When should you trust an AI meeting summary and when should you check it?

The reliable indicator is meeting type. Routine project check-ins with two or three participants, clear audio and no high-stakes decisions tend to produce summaries that are broadly accurate enough to use as working notes. Client-facing calls involving commitments, timescales or pricing, HR conversations, or anything where the exact wording matters, require a human to read and confirm before the summary goes anywhere.

The errors that slip through are not obvious. The transcription misses a “not” and reverses a decision. Speaker attribution assigns an action item to the wrong person. The generative summarisation paraphrases a client commitment in a way that is technically close but not quite what either side intended. Research by Maynez and colleagues, published in the ACL Anthology, found that a significant share of abstractive summarisation outputs contain content not faithfully grounded in the source text, a known limitation of the underlying technology.

White and Case note that machine transcripts also capture side comments and incomplete thoughts that a human note-taker would edit out. The AI summary can then build on those fragments, which is where paraphrasing risk compounds.

A practical approach: treat the AI summary as draft notes. Read it before you forward it. For decisions with financial, legal or employment implications, confirm the outcome verbally at the end of the call and follow up by email. The follow-up email creates the reliable record. The AI summary is a prompt, not a document of record.

What else should you know before you commit to an AI meeting tool?

Any meeting involving identifiable people generates personal data under UK GDPR the moment recording starts. That covers the audio, the transcript and the AI-generated summary. You need a lawful basis for processing it, you must be transparent with participants, and you need a clear position on how long you retain it and where it is stored. Treating the tool as admin software rather than a data processor is where the compliance gap opens.

The ICO’s guidance on international transfers is worth reading before you commit to any cloud-based meeting tool. Many providers host data in the United States. Moving personal data there requires an assessment and appropriate safeguards under the UK’s International Data Transfer Agreement, making data residency a legal obligation rather than a preference.

Zoom’s 2023 controversy is a useful reference point. Public criticism followed changes to their terms that suggested meeting recordings could be used to train AI models. Zoom subsequently clarified that it would not use customer content, including meeting audio and video, for training without consent. The episode illustrates how quickly vendor terms on this topic can generate trust issues when they are unclear, and why reading them matters.

The NCSC’s guidance on SaaS services recommends treating AI meeting tools as high-risk suppliers when meetings contain commercially sensitive client information. Check security certifications, data retention defaults and deletion options before you sign up, not after.

For businesses in FCA-regulated sectors, AI meeting notes do not replace required contemporaneous records. The FCA’s guidance on AI in financial services is clear that using AI tools does not remove existing regulatory record-keeping obligations. If a meeting needs a suitability note, the AI summary is not it.

Sources

- ICO (2024). Employment practices: Monitoring workers. ICO guidance establishing that employers must inform workers before recording meetings and have a lawful basis for doing so. https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/employment/employment-practices-monitoring-workers/ - ICO (2024). Guide to UK GDPR: Lawful basis for processing. ICO guidance on the six lawful bases for processing personal data, directly relevant to recording and AI summarising meetings. https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-uk-gdpr/lawful-basis-for-processing/ - ICO (2024). International transfers guidance. ICO requirements for transferring personal data outside the UK, applicable when AI meeting tools host data in the United States. https://ico.org.uk/for-organisations/guide-to-data-protection/international-transfers/ - ICO (2024). Special category data. ICO guidance on the stricter lawful basis required for special category data, relevant to AI meeting notes from HR or health-related conversations. https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-uk-gdpr/special-category-data/ - White & Case (2024). When every word is recorded: AI meeting tools and new governance risks. Analysis identifying four governance exposures when AI meeting tools operate without policy: inconsistent records, privilege waiver, spoliation risk and data governance failures. https://www.whitecase.com/insight-alert/when-every-word-recorded-ai-meeting-tools-and-new-governance-risks - Maynez, J. et al. (2020). On Faithfulness and Factuality in Abstractive Summarization. ACL Anthology. Peer-reviewed study finding that abstractive summarisation outputs frequently contain content not faithfully grounded in the source text, the underlying risk in AI meeting notes. https://aclanthology.org/2020.acl-main.173.pdf - Koenecke, A. et al. (2020). Racial disparities in automated speech recognition. Proceedings of the National Academy of Sciences (Stanford University). Study demonstrating that ASR accuracy drops significantly for certain accents and speaker demographics, relevant to UK businesses with diverse teams. https://www.pnas.org/doi/10.1073/pnas.1915768117 - NCSC (2024). Moving to SaaS: Security guidance. NCSC recommendations for assessing SaaS suppliers, including data residency, access controls and incident response, applicable to AI meeting tools handling sensitive client information. https://www.ncsc.gov.uk/collection/cloud-security/saas - FCA (2024). Artificial intelligence in financial services. FCA guidance that using AI tools does not remove regulatory record-keeping obligations for authorised firms. https://www.fca.org.uk/insight/artificial-intelligence-financial-services - Zoom (2023). Updated terms of service: clarification on AI training. Zoom's published clarification that customer content, including meeting recordings, would not be used to train AI models without consent, following public criticism of earlier terms wording. https://blog.zoom.us/zooms-terms-of-service-ai/

Frequently asked questions

Are AI meeting summaries accurate enough to rely on as official records?

Not reliably, and legal commentators advise against it. Transcription accuracy can reach around 95% in good conditions, but drops with background noise, accents or multiple speakers. The generative summarisation layer can then misstate decisions or misattribute action items. White and Case identify this as a governance risk: where AI summaries diverge from what was actually agreed, the inconsistency can become a liability in a client dispute or employment grievance. Treat them as draft notes, not a document of record.

Do I need to tell people on a call that AI is taking notes?

Yes, under UK GDPR. Recordings and AI-generated transcripts of identifiable individuals are personal data. You need a lawful basis for processing them and must be transparent with participants before or at the start of the call. The ICO's employment guidance makes clear that employers should not record meetings without informing workers in advance. For client calls, consider adding a clause to your engagement letters or terms of business so participants know recording may occur.

What should I check before enabling an AI meeting tool for my team?

Four things: where the vendor stores your data, whether they use recordings to train their AI models, what their security certifications are, and what the data retention and deletion defaults look like. Many providers host data in the United States, which triggers UK GDPR international transfer obligations. Zoom's 2023 controversy, where terms wording suggested recordings could be used for AI training, is a reminder that vendor terms on data use are worth reading carefully before you commit.

This post is general information and education only, not legal, regulatory, financial, or other professional advice. Regulations evolve, fee benchmarks shift, and every situation is different, so please take qualified professional advice before acting on anything you read here. See the Terms of Use for the full position.

Ready to talk it through?

Book a free 30 minute conversation. No pitch, no pressure, just a useful chat about where AI fits in your business.

Book a conversation

Related reading

If any of this sounds familiar, let's talk.

The next step is a conversation. No pitch, no pressure. Just an honest discussion about where you are and whether I can help.

Book a conversation