what I found reading the fine print

I set out to write a straightforward ranking and ended up rewriting half of it, because the thing I was most sure about turned out to be wrong.

Most "secure AI note taker" lists rank tools by counting compliance badges. Every serious vendor has a SOC 2 logo by now, so the badge tells you almost nothing about where your audio gets processed, whether it's deleted after transcription, or whether your meetings are quietly training somebody's model.

That gap costs money. IBM's 2025 Cost of a Data Breach Report found 63% of the 600 organizations it studied have no AI governance policies, and that a high level of shadow AI added USD 670,000 to the global average breach cost. Meeting recorders are the most common shadow AI in any building: somebody installs one, and within a month every client call is flowing through a vendor legal has never heard of.

So I skipped the feature lists and spent six weeks in security pages, help centre articles and pricing matrices.

How I tested

I ran 12 AI note takers through real meetings: sales calls, hiring interviews, the usual internal syncs. Every factual claim below comes from the vendor's own documentation, and where two of a vendor's pages contradict each other I say so rather than picking whichever version is more flattering. The five questions I scored the finalists on:

• Does a bot join the call, and does bot-free work on every platform or just one?
• Is audio transcribed on your machine, or sent to a cloud pipeline?
• Is the audio deleted after transcription, and are notes kept forever by default?
• Is model training off by default, including for the AI vendors sitting behind the product?
• Are SSO, retention rules and HIPAA real features, or Enterprise-tier bait?

How they compare

That first column is where I was wrong. Bot-free capture used to be the line dividing this category, and it isn't any more: Fathom and Fireflies have both shipped it since I last looked, so four of five now offer some bot-free path. What nobody else has shipped is transcription that happens on your own machine.

1. Krisp: the only one that transcribes on your device

The call that settled this was a hiring interview I took from an airport lounge. Every bot-based tool put a visible "notetaker" in the room, and the candidate asked what it was before she answered a single question. Krisp captured the same call with nothing in the participant list, and the boarding announcements never showed up in the transcript.

Krisp works as an audio layer on the device rather than a guest in the meeting. Its AI Meeting Assistant page says it plainly: "you don't need a bot in your meeting. Krisp works directly at the audio level on your device." There's an optional Zoom bot if you'd rather have a visible participant, which I appreciate: that choice belongs to you, not the vendor.

What I liked:

• English transcription runs locally. Krisp's wording: "Meeting transcripts are generated on the user's machine." Another 15 languages go to servers.
• SOC 2 Type II, PCI-DSS 4.0 and GDPR, with TLS 1.2 in transit, AES-256 at rest, and hard deletes. It opts "out of any data sharing or training permissions when working with third party service providers."
• Enterprise adds SSO and SCIM, a super-admin role, and private transcription and recordings kept on the device.
• The AI note taker cleans up audio before transcribing it, so noisy calls produce fewer wrong words. A garbled transcript is a data integrity problem, not just an annoyance.

What I didn't:

• No permanent free plan, only a 7-day trial, and local transcription covers English and nothing else.
• No regional storage at all: "All data is stored on secure servers located in the United States. At this time, Krisp does not offer regional data storage options."
• BAA signing needs 100+ seats, and I couldn't find a published default retention window anywhere.
• Krisp's own security and pricing pages disagree about whether SSO is a team-plan or Enterprise feature. Somebody should fix that.

Pricing, September 2026: 7-day trial, then Core at $16 per user monthly or $8 billed annually, Advanced $30 or $15, Enterprise on request. G2: 4.7 from 1,599 reviews.

2. jamie: the strictest promise about where data lives

jamie was the easiest tool to get past a European DPO, because the answer to "where does the audio go?" fits in one sentence on its security page: "All data storage and processing stays within the EEA, Switzerland, and the UK. No data leaves these jurisdictions, ever." Its notes came out more narrative than I expected. Nice to read, occasionally thin on action items.

In its favour: bot-free, ISO 27001 certified, GDPR and DORA compliant, and "meeting audio is deleted after transcription." AES-256 at rest, TLS 1.2 in transit, SAML 2.0 SSO. The training clause is the cleanest of the five: "Your data is never used for training of models, not by us or any of the model providers."

Against it: SOC 2 Type II shows up only as "pending" in the pricing page's Enterprise column, and US procurement teams ask for the finished report by name. HIPAA isn't mentioned anywhere on the site, and the free plan stops at 10 meetings a month with a 30-minute cap.

Pricing, September 2026: free tier, then Plus €21 per seat monthly, Pro €39, Team €33 plus VAT, all billed annually. Monthly billing runs about 17% higher. G2: 4.7 from 48 reviews.

3. Fireflies.ai: storage in a bucket you own

Fireflies has the deepest admin surface here, and its Enterprise storage goes further than the usual region picker: Private Storage puts transcripts, audio and summaries "in a storage bucket that you own and manage." My frustration was how much sits behind that one tier. On Business I couldn't set a retention window at all.

In its favour: SOC 2 Type II and GDPR, 256-bit AES at rest, TLS in transit, and a blunt line on training: "You own your data. We don't train on it by default unlike other AI companies." Bot-free recording works on Windows and Mac through the desktop app, and on Google Meet through Google's SDK.

Against it: the default calendar flow still uses a bot "always visible in the participant list to ensure compliance," and the bot-free system audio mode "does not save separate audio or video files." Private storage, HIPAA, SSO and custom retention all sit on Enterprise, and the docs say data is kept "at least 12 months."

Pricing, September 2026: free tier with unlimited transcription and 400 minutes of storage per team, Pro $18 per seat monthly or $10 annually, Business $29 or $19, Enterprise $39 per seat, annual only. G2: 4.7 from 752 reviews.

4. Fathom: the most compliance you can get for nothing

Fathom's free tier is the odd one out: unlimited recordings and transcription, forever, on a platform documenting HIPAA, SOC 2 Type II and GDPR compliance. If you're a consultant handling client or patient data alone, that's hard to argue with. Advanced AI summaries cap at five calls a month on free, which is where the upgrade pressure lives.

In its favour: the sub-processor clause is specific, "None of our AI sub-processors (Anthropic, OpenAI, or Google) are contractually permitted to use our users' data to train their AI models," and there's a blanket BAA that self-executes with the service agreement. Bot-free capture now exists too: "No bot. Just a clean transcript, AI summary, and action items."

Against it: that bot-free mode is a Mac-only beta, so everywhere else the default is still a bot in the call. Fathom itself "uses de-identified customer data to improve the accuracy of our proprietary AI models" unless you go turn it off. All data lives in the US, SSO and SCIM are Enterprise-only, and retention "isn't self-serve yet." The pricing page also lists "HIPAA: signed BAA" under Enterprise only, which sits awkwardly next to the blanket BAA claim. I'd get that in writing before recording anything covered.

Pricing, September 2026: free forever, Premium $20 monthly or $16 annually, Team $19 per user or $15, Business $34 or $25, Enterprise on request. G2: 5.0 from 7,016 reviews.

5. Granola: no audio kept, but go read the training toggle

Granola felt like the most private tool here while I was using it. No bot, no recordings kept: "Once transcription is complete, the audio is deleted from our systems and any third-party services." Then I hit the line that dropped it to fifth. "Granola trains on your anonymized data so we can keep making Granola better. You can opt out of this in your Settings." Opt out, not opt in, unless you're on Enterprise, where it's off by default.

In its favour: no audio retention, outside AI vendors are never allowed to train on your data, SOC 2 Type II certified, notes encrypted in a US-hosted AWS VPC, and transcript auto-deletion on any plan from one day to one year.

Against it: its docs are direct about the gap, "Granola is not currently HIPAA compliant and cannot sign Business Associate Agreements," with support targeted for end of 2026. Notes are "retained indefinitely" unless somebody switches auto-deletion on, and SSO needs Enterprise with 50 or more seats.

Pricing, September 2026: Basic $0 with limited meeting history, Business $14 per user monthly, Enterprise $35. G2: 4.7 from 36 reviews.

How to choose

Check that bot-free actually works on your platform, not just in the marketing. Krisp, jamie and Granola are bot-free everywhere; Fathom's is a Mac-only beta, and Fireflies needs the desktop app or the Meet SDK.

Ask where the audio gets transcribed, because data that never leaves the machine has no transit risk and no sub-processor list to audit.

Read the training clause instead of the badge. Fathom and Granola train on de-identified data unless you opt out. jamie says never. Fireflies says not by default.

Then price the tier you'd genuinely need, because HIPAA, SSO and retention sit on Enterprise almost everywhere here, and one vendor wants 100 seats before it will sign a BAA.

Verdict

Bot-free capture is no longer a differentiator, which is good news for anyone who hates watching a robot join a client call. What nobody has matched is on-device transcription, and that's why Krisp takes the top spot for me: it's the only tool here where the audio itself can become text without leaving your machine, and it's bot-free by default on every platform instead of in beta on one.

It isn't right for everyone, and I'd rather say so than pretend otherwise. If EU-only storage is a hard requirement, jamie wins and Krisp can't compete, because Krisp keeps cloud data in the US with no regional option. If you need HIPAA on a free plan, Fathom is the only one that manages it. If you want to own the bucket your transcripts sit in, that's Fireflies Enterprise.

‍