Client meeting transcripts and AI data leakage: what a recorded review gives away in ChatGPT or Claude.

An AI scribe can record an annual review and produce a transcript within minutes, and advisers then paste the transcript into ChatGPT or Claude to draft the file note and the letter. The transcript holds more than any note the adviser would write: every word, the interruptions, a relative who sat in for the first twenty minutes, an argument between spouses and an aside the client thought was off the record. This page marks the items in an invented review transcript that the Privacy Act and the Code of Ethics bear on, and shows the transcript turned into a file note on Ermos inside the practice.

The client meeting transcript

Produced by the practice’s meeting scribe tool at the end of a client review, then used to write the file note, the Record of Advice and the follow-up letter. Standard 8 of the Code of Ethics requires records of clients to be complete and accurate; the file note remains where the adviser records the advice and the client’s decisions.

Transcript
· 21 October 2026, 10.00am ·

[00:03:12] Nadia: Patricia, I will keep this short so you can get to your appointment. Lucy has told me a bit about the diagnosis.

[00:03:30] Patricia:

[00:21:05] Tom:

[00:34:40] Lucy:

[00:41:18] Nadia:

[00:41:49] Tom:

[00:58:02] Lucy:

[00:58:14] Tom:

[01:14:30] Lucy: Nadia, can you stop the recording for a second? Tom has stepped out to move the car.

[01:14:36] Lucy:

[01:14:50] Nadia: Understood. I will send the referral to you only.

[01:15:02] System:

An invented transcript. The names, addresses and details are fictional. Hover or tap any highlighted item for the analysis; the full list is below.

What leaves the practice

  1. 1
    The clients and the occasion

    Named, with the date and the type of meeting. Personal information under the Privacy Act, where the Act applies to the practice. Privacy Act guide.

  2. 2
    A third person’s diagnosis and wishes

    A parent’s early-stage dementia, the advice to consider residential care and her wish about her home, spoken by the parent. Health information about a person who is not the client is sensitive information under the Privacy Act, and the transcript names the street she lives on as well. Patient data guide.

  3. 3
    A confidential redundancy

    That a named client will lose his job in December and has told nobody else, with an instruction not to contact the employer. Employment information given in confidence. Privacy Act guide.

  4. 4
    A health change and a reluctance to disclose it

    A recurrence of a condition, an appointment date and the client’s worry about telling the insurer. Health information is sensitive information under the Privacy Act, and the transcript records the reluctance in her own words. Patient data guide.

  5. 5
    The advice and the decision against it

    The adviser’s recommendation, the reason, and the clients’ decision to overrule it. Part of the record that helps the practice show how the best interests duty was handled, which is why it should stay in the practice.

  6. 6
    A will dispute between spouses

    A client’s wish about a guardian, her husband’s refusal to discuss it and a named relative. A family disagreement overheard by a scribe tool. Privacy Act guide.

  7. 7
    The aside after the recording was meant to stop

    A request for a referral that the other spouse is not to know about. The tool kept running. Recording consent is a separate question from where the transcript goes, and a client who asks to stop the recording expects it to stop. Privacy Act guide.

  8. 8
    The auto summary

    A machine-written summary of the whole meeting, including the private referral. It repeats every sensitive item in one paragraph and may be wrong. The adviser must check it before it is relied on.

  9. 9
    The scribe tool and the consent note

    The practice’s recording set-up and a line noting consent. ASIC’s REP 798, released on 29 October 2024, reviewed how 23 licensees use or plan to use AI and manage the related risks, so the choice of scribe tool is a question for the licensee as well as the adviser.

What happens in Frontier Models (ChatGPT, Claude)

  • The whole document is transmitted to the provider’s servers. On personal plans the user cannot choose where it is stored or processed, and for the major providers that has generally meant outside Australia, under that country’s legal process. Some business plans offer storage in Australia, but the provider still receives the content.
  • On consumer tiers, prompts can be retained and used to train future models.
  • The provider’s staff and systems can reach the content under the provider’s own policies.
  • Once sent, the practice no longer controls it. Retention and deletion happen on the provider’s terms.

The same document on Ermos

Ermos Dominion

The document is drafted on a unit in your office, from your own templates and the client file. Every marked item stays on the unit, which keeps working with the internet switched off. Nothing in it is transmitted to an AI provider, so there is no disclosure to analyse: the confidentiality work is the same as for your file server.

Ermos Edge

Your documents, the index and your access boundaries stay on your own instance in an Australian data centre. When a staff member asks for this draft, only their question and the excerpts they are permitted to see go to a named Australian provider, who is contractually barred from keeping the content or training any model on it. Nothing is processed outside Australia.

Frontier Models (ChatGPT, Claude)Ermos EdgeErmos Dominion
Where the document is processedProvider servers, generally offshore on personal plansYour instance in an Australian data centre; answers generated in AustraliaThe unit in your office
Who can read itProvider staff and systems, under policyYour staff, within the boundaries you set. The named Australian provider processes only permitted excerpts, under contract, and keeps nothingYour staff only
Is it keptOn the provider’s termsKept on your instance; the provider is barred from retaining itStays on the unit
Can it train a modelOn consumer tiers, yesNo, by contractOnly your own unit learns from it, on your hardware

Part of AI data leakage in financial advice practices. See how this works in practice: File notes on Ermos.

Common questions

Do ChatGPT and Claude use the information in a client meeting transcript?
Yes, everything pasted or uploaded from the transcript is sent to the AI company's servers and processed there to produce a reply. As at October 2026, whether a conversation on a personal plan (ChatGPT Free, Plus or Pro; Claude Free, Pro or Max) can be used to train the models depends on a setting each user controls. Business plans (ChatGPT Business and Enterprise, Claude Team and Enterprise) and the developer APIs sit under commercial terms, and OpenAI and Anthropic each say they do not train on that content by default (OpenAI, Anthropic). On either product, the thumbs up and thumbs down buttons can send a whole conversation back for training. This transcript carries a parent's dementia diagnosis, a redundancy nobody else knows about and a request made after the recording was meant to stop.
Is it safe to paste a client meeting transcript into ChatGPT or Claude if we remove the names?
No, because every word of the meeting stays in the text. Removing names rarely makes a document anonymous. Information stays personal information while the person is reasonably identifiable, and the OAIC warns that information can be at risk of re-identification even when it has been de-identified or anonymised. A coming redundancy, a thyroid recurrence, a dispute over a guardian clause and a street name still point to one couple. The Office of the Australian Information Commissioner (OAIC) recommends in its guidance on commercially available AI products that organisations do not enter personal information, and particularly sensitive information, into publicly available generative AI tools, because of the significant and complex privacy risks. The transcript also holds the health information of a relative who is not the client.
Is it safe to use an AI note-taker or meeting recorder for a client meeting transcript?
Not until the practice knows where the transcript is stored, whether the vendor trains a model on it and who can review it. Recording and transcription tools send the audio or transcript to the tool's vendor, so the same questions apply. The OAIC's guidance also tells organisations to review carefully the terms and settings that will apply to their use of any AI product. Here the tool kept running after a client asked to stop the recording, and its auto summary repeated her private referral.
How can an advice practice use AI for a client meeting transcript without sending it to ChatGPT or Claude?
Ermos is built so the document stays under your control. On the Dominion AI unit it is drafted inside your office and none of it is sent to an AI provider. On Ermos Edge your documents and index stay on your own instance in an Australian data centre, and only the question and the excerpts the user is permitted to see go to a named Australian provider that is contractually barred from keeping them or training any model on them. The file note is drafted from the transcript and the practice's own file note template. The adviser checks it against what was said and signs it before it goes on the file.
Does a practice need the client's agreement to record a meeting?
Recording and surveillance device laws differ by State and Territory, and they sit outside this page, which is set in NSW. The practice should take advice on the rules that apply to it. Separately, a practice covered by the Privacy Act must take reasonable steps to tell clients how their information is collected and used, and a client who asks to stop the recording expects it to stop.
Is a transcript a client record under the Code of Ethics?
Standard 8 of the Code of Ethics requires records of clients, including former clients, to be kept complete and accurate. A transcript is part of what the practice holds about the client and it should be kept with the file. The file note remains where the adviser records the advice and the client's decisions, and the adviser should check the transcript against what was said.
A relative sat in for part of the meeting. Whose information is in the transcript?
Both the client's and the relative's. A practice covered by the Privacy Act holds personal information about any living person it records, and a diagnosis spoken by the relative is health information, which is sensitive information under the Act. The relative is not the client, so the transcript is information the practice holds about someone it does not act for.

See Dominion answering from your own documents.

A demonstration takes 30 minutes, uses no client data, and comes with no obligation.

Book a demo
Keep reading
AI data leakage in financial advice practices AI for financial advisers The Privacy Act, the APPs and AI All professions