Client intake call transcripts and AI data leakage: what a recorded first call gives away in ChatGPT or Claude.

The first call with a buyer is where the real story comes out: how much they can borrow, who is helping them, why they are moving now and what they have not told their employer. Practices record and transcribe these calls so nothing is missed, then paste the transcript into ChatGPT or Claude to produce file notes and a checklist. A transcript is a word-for-word record of everything the client said in confidence. This page marks every item in a routine intake call that bears on the Privacy Act, the AML/CTF obligations and the rules for NSW conveyancers, and shows how the same call is processed on Ermos inside the practice.

The client intake call transcript

Held on the first call, when a buyer rings after receiving a contract. The transcript is generated by a call notetaker and used to open the matter file and prepare file notes.

Call transcript
Recorded and transcribed by the practice’s call notetaker · Tuesday 29 September 2026, 10.04am · 6 minutes

[00:00:06] Rosalind Teague: Brindle Lane Conveyancing, Rosalind speaking.

[00:00:09] Joel: Hi Rosalind, Joel Kessler here. Tessa at Fernhill gave me your number.

[00:01:02] Rosalind: Good. Who is buying?

[00:01:06] Joel:

[00:01:44] Rosalind: Tell me about the money.

[00:01:47] Joel:

[00:02:31] Rosalind: Since July the practice has to run customer checks under the AML rules, so I will ask where the money comes from. A gift is fine, I just need to record it. What do you both do?

[00:03:08] Joel:

[00:03:59] Rosalind: Of course. Congratulations. Here is how I work.

[00:04:41] Rosalind:

[00:05:30] Joel: Could we do the identity check on Thursday the first?

[00:05:34] Rosalind: Yes, 10.15 on Thursday.

An invented call between an invented conveyancer and invented clients. The phone number and email address are placeholders. Hover or tap any highlighted line for the analysis; the full list is below.

What leaves the practice

  1. 1
    The clients’ names

    Two identities spoken aloud on a recording. Personal information, and the key that ties the rest of the transcript to real people. Privacy Act guide.

  2. 2
    The property, the offer and the agent

    A live address, the asking price and the buyers’ plan to pay it, before the contract is exchanged. Keeping client information confidential is listed among the rules of conduct in Schedule 2 of the Conveyancers Licensing Regulation, according to the NSW Government’s conveyancers page.

  3. 3
    The finance position

    A pre-approval, total savings and the deposit. Financial information that shows how much cash the buyers hold. It is personal information, though not sensitive information. Privacy Act guide.

  4. 4
    A named family gift

    A gift of $60,000 from two named parents, recorded as part of the source of funds. AUSTRAC’s starter kit covers source of funds in customer due diligence, and the parents’ names appear without their involvement. Privacy Act guide.

  5. 5
    A pregnancy and a request for confidence

    Health information about a named client, plus the fact that her employer does not know. Health information is sensitive information under the Privacy Act, which has stricter rules for its collection, use and disclosure. Patient data guide.

  6. 6
    Employer and occupation

    Where each client works and in what role. Personal information that shows where each of them is on a weekday. Privacy Act guide.

  7. 7
    Mobile number and email address

    The way to contact the clients, which is also the way to contact them while pretending to be the practice. Privacy Act guide.

  8. 8
    The fee quoted

    What the practice charges and its disbursement estimate. Commercial information about the practice and the client.

  9. 9
    The conveyancer’s first advice

    An off-the-cuff view of risk in the contract and a plan for the matter. The practice’s judgement, given before the contract has been fully reviewed.

What happens in Frontier Models (ChatGPT, Claude)

  • The whole document is transmitted to the provider’s servers. On personal plans the user cannot choose where it is stored or processed, and for the major providers that has generally meant outside Australia, under that country’s legal process. Some business plans offer storage in Australia, but the provider still receives the content.
  • On consumer tiers, prompts can be retained and used to train future models.
  • The provider’s staff and systems can reach the content under the provider’s own policies.
  • Once sent, the practice no longer controls it. Retention and deletion happen on the provider’s terms.

The same document on Ermos

Ermos Dominion

The document is drafted on a unit in your office, from your own templates and the matter file. Every marked item stays on the unit, which keeps working with the internet switched off. Nothing in it is transmitted to an AI provider, so there is no disclosure to analyse: the confidentiality work is the same as for your file server.

Ermos Edge

Your documents, the index and your access boundaries stay on your own instance in an Australian data centre. When a staff member asks for this draft, only their question and the excerpts they are permitted to see go to a named Australian provider, who is contractually barred from keeping the content or training any model on it. Nothing is processed outside Australia.

Frontier Models (ChatGPT, Claude)Ermos EdgeErmos Dominion
Where the document is processedProvider servers, generally offshore on personal plansYour instance in an Australian data centre; answers generated in AustraliaThe unit in your office
Who can read itProvider staff and systems, under policyYour staff, within the boundaries you set. The named Australian provider processes only permitted excerpts, under contract, and keeps nothingYour staff only
Is it keptOn the provider’s termsKept on your instance; the provider is barred from retaining itStays on the unit
Can it train a modelOn consumer tiers, yesNo, by contractOnly your own unit learns from it, on your hardware

Part of AI data leakage in conveyancing practices.

Common questions

Do ChatGPT and Claude use the information in a client intake call transcript?
Yes, a pasted transcript is sent to the AI company's servers and processed there to produce a reply. As at October 2026, whether a conversation on a personal plan (ChatGPT Free, Plus or Pro; Claude Free, Pro or Max) can be used to train the models depends on a setting each user controls. Business plans (ChatGPT Business and Enterprise, Claude Team and Enterprise) and the developer APIs sit under commercial terms, and OpenAI and Anthropic each say they do not train on that content by default (OpenAI, Anthropic). On either product, the thumbs up and thumbs down buttons can send a whole conversation back for training. The transcript is word for word, with the buyers' savings, a named family gift and a pregnancy that the client's employer does not know about.
Can we use ChatGPT or Claude for a client intake call transcript if we remove the names?
No, because the story in the call identifies the buyers without their names. Removing names rarely makes a document anonymous. Information stays personal information while the person is reasonably identifiable, and the OAIC warns that information can be at risk of re-identification even when it has been de-identified or anonymised. A unit at a named address, an asking price of $1,085,000, a $60,000 gift from the wife's parents and a fourteen-week pregnancy fit one couple. The Office of the Australian Information Commissioner (OAIC) recommends in its guidance on commercially available AI products that organisations do not enter personal information, and particularly sensitive information, into publicly available generative AI tools, because of the significant and complex privacy risks. The pregnancy is health information, which is sensitive information under the Privacy Act.
Is it safe to use an AI note-taker or call recorder for a client intake call transcript?
Not until the practice has checked the vendor's terms and settings. Recording and transcription tools send the audio or transcript to the tool's vendor, so the questions are where it is stored, whether it trains a model and who can review it. The OAIC's guidance also tells organisations to review carefully the terms and settings that will apply to their use of any AI product. This transcript captures the buyers' finances, a gift from a client's parents and a pregnancy the client asked the conveyancer to keep private.
How can a conveyancing practice use AI for a client intake call transcript without sending it to ChatGPT or Claude?
Ermos is built so the document stays under your control. On the Dominion AI unit it is drafted inside your office and none of it is sent to an AI provider. On Ermos Edge your documents and index stay on your own instance in an Australian data centre, and only the question and the excerpts the user is permitted to see go to a named Australian provider that is contractually barred from keeping them or training any model on them. The file notes and checklist are drafted from the client file and the practice's own matter opening template. The licensed conveyancer checks them against what the client said before they go on the matter file.
What counts as sensitive information in a conveyancing call?
Under the Privacy Act health information is sensitive information, so a client's mention of a pregnancy is sensitive, while their savings and income are personal information that is not sensitive. Sensitive information has stricter rules on collection, use and disclosure. A call transcript holds both kinds in the words the client chose.
When did AML/CTF obligations begin for conveyancers?
AUSTRAC says the new AML/CTF laws apply from 1 July 2026 to designated services commonly provided by conveyancers, and a conveyancer must have an AML/CTF program before assisting in the planning or execution of a transaction to sell, buy or transfer real estate. That is why an intake call now asks where the money comes from.
Is a call recording part of the matter file?
NSW Government guidance says records for each transaction must be kept in a separate file for at least seven years, and AUSTRAC lists audio and video files among records a business might keep. A recording or transcript that supports the matter should be treated as part of the file, so the practice needs to know where each copy sits.

See Dominion answering from your own documents.

A demonstration takes 30 minutes, uses no client data, and comes with no obligation.

Book a demo