Can You Use an AI Notetaker at Work? Matching the Tool to Your Company's Data Policy

You want better meeting notes. Your company has a policy about where its data is allowed to go. Those two things usually clash because of how most AI notetakers are built: in a way a careful data policy is right to block.

You can keep the AI and choose where it runs. MimicScribe keeps the audio on your Mac and lets you point the text features at whatever provider your company has already approved — any OpenAI-compatible endpoint your company already uses, or a model on your own machine. Nobody has to push a new vendor through security review. This post walks through each option, what still touches the cloud, and how to check where your transcripts actually go, so you don’t have to take my word for it.

What your company’s policy is actually objecting to

The objection is almost never “notes are bad.” It’s that a vendor your company never vetted ends up holding the meeting. The common AI-notetaker design — a cloud service that connects to your calendar and sends a bot into each call — triggers that objection three ways:

A third party becomes a participant. The bot is visible to everyone, and the recording lives with the vendor, not your company.
Your audio leaves the building. The raw recording — a voiceprint of everyone on the call, not just you — is uploaded and stored on someone else’s infrastructure.
Retention and training are the default. Many services keep transcripts indefinitely and reserve the right to use customer data to improve their models. Opting out is often an enterprise-only setting.

The key word is unvetted. A provider your company has already approved isn’t a new risk to evaluate; your security team already cleared it. The setup below is built on that.

The audio never leaves your Mac

MimicScribe captures audio at the operating-system level using Core Audio process taps. No bot joins the call. Transcription and speaker separation run on-device, and the audio file is never uploaded, streamed, or copied to a server.

Audio is worth keeping off a vendor’s servers for reasons the transcript doesn’t share: it’s a voiceprint of everyone who spoke, it captures people who never agreed to a transcription service, and it’s the one copy you can’t un-record. Most bot-based notetakers store that file indefinitely. Here, it exists nowhere but your Mac — on a company-managed machine, that’s inside the perimeter your IT team already controls.

What keeping the audio local does not do on its own is protect the content. The words — the numbers, names, and decisions — are just as exposed in the transcript as in the recording, and the transcript is what the AI features work on. Where that goes is what your company’s policy cares about, and you choose it.

On-device also doesn’t cost you quality. Transcription uses NVIDIA’s Parakeet model, and speaker separation is measured at 98.3% aggregate speaker attribution accuracy across a public 57-file benchmark — corpus and scoring method public.

You pick the provider for the text AI

The text features — summaries, action items, the live meeting assistant, dictation cleanup — need a large language model to run. MimicScribe doesn’t lock you to one. You choose which provider handles them, per feature, in Settings → AI & Data.

Out of the box, those features use Google Gemini through an open-source, stateless proxy — no account, no database, no stored copy, with a one-way hardware hash for rate limiting. That zero-config default is built for evaluating the app and for meetings where the stakes are low. It’s a real privacy posture, but it routes through our infrastructure, which a company setup will want to change.

Use the AI provider your company already trusts

What satisfies a security team is routing the text AI to a provider your company has already cleared, on a key from the company’s own account. Then the only vendor holding your transcript text is one that’s already through your security review, and we’re not in the path at all.

Point MimicScribe at your company’s provider. Anything that speaks the OpenAI chat-completions API works — an internal gateway in front of Azure OpenAI or Amazon Bedrock, a self-hosted model, or a service like OpenAI or OpenRouter. Set the base URL and a key on the company’s own account under Settings → AI & Data → Custom endpoint, and the transcript text goes straight to that provider, bypassing our proxy.

Use a company-issued key, not a personal one. A personal key works, but it routes company data through your personal account — which many security teams treat as exactly the shadow IT they’re trying to prevent. On a company key the usage runs under the org’s existing agreement: owned, billed, auditable, and revocable by them. Data-residency and retention controls live on the provider’s side under that agreement, and your security team already knows what theirs covers.

Pointing MimicScribe at a custom endpoint is a few fields — base URL, model, and your company key — with a Verify button that confirms the connection before any transcript is routed to it. If you already use a coding agent like Claude Code, you can skip the settings screen entirely: tell it in plain English to point MimicScribe at your endpoint, and it runs the setup for you. The custom endpoint guide walks through it.

You don’t need your provider’s biggest model. The prompts are tuned for a small, fast instruction model — the mini / flash / lite tier most providers offer — so a cheap, low-latency choice handles summaries, action items, and the live assistant fine. It does need a 32k+ context window and structured-output (JSON) support for long meetings; the app checks for both and fails loud rather than quietly truncating your notes.

MimicScribe is the capture-and-routing layer, not the AI vendor. Your company doesn’t have to trust us with the transcript — it only has to trust the provider it already trusts. And you can prove the routing: Settings → Network Log shows each AI request going to your provider’s address, not ours.

Every text feature follows your routing — including reference-document search and vocabulary hints. Point it at your own endpoint and nothing goes through our proxy; point it at a local model and nothing reaches the cloud at all.

If no cloud provider is allowed: on-device or offline

Most companies that permit AI at all have an approved provider, so the setup above covers them. If yours allows none, two fallbacks keep MimicScribe useful:

Run the model on your Mac. Point the text features at a local model — Ollama, LM Studio, or llama.cpp — and the transcript text never leaves the machine. Summaries, action items, and the live assistant all still run. The honest tradeoffs are quality and speed: you get whatever model your hardware can run, and a local model is slower than the cloud. A summary that comes back in seconds from the cloud can take much longer locally — the bigger the model, the slower — and while it runs it’s using your GPU and memory, so the Mac is working hard and less responsive until it finishes. The live assistant feels this most, since it’s trying to keep up with the conversation in real time; on modest hardware, expect it to lag. Pick the largest model your Mac runs comfortably — the on-device AI guide walks through it.
Offline Mode. Turns cloud AI off for a meeting entirely. Transcription and speaker separation still run, nothing is transmitted, and you backfill a summary later if you want one. It’s the simplest “nothing leaves, period” switch.

Either way the meeting stays yours and stays usable — your transcripts and summaries are stored locally, and your own tools can read them through MimicScribe’s local MCP server. For most people the answer is still a cloud provider — just one your company already signed off on.

Match the setup to your company’s line

Your company’s line	Setup	Who holds the transcript text
“Use a provider we’ve already approved”	An OpenAI-compatible endpoint your company uses	Your approved provider, on your company’s account — not us
“We just want to try it”	Built-in Gemini proxy (default)	Google, via our no-retention open-source proxy
“No cloud for this meeting”	Local model	Nobody — the text AI runs on your Mac
“No AI at all”	Offline Mode	Nobody — transcription only, nothing transmitted

The audio never leaves your Mac in any of these rows. The choice is only about where the text goes.

Tell people you’re taking notes

Choosing a trusted provider doesn’t remove your obligation to tell people you’re taking notes. If anything, it raises it: because no bot joins the call, the other participants get no automatic indication that a notetaker is running. The disclosure is on you, not the tool.

Many company policies — and the recording laws in some places — require notifying participants before you record or transcribe a conversation. None of the routing choices above change that. Tell people on the call.

How to verify it yourself

Don’t take the privacy claims on trust; check them. Settings → Network Log shows every request the app makes, live: its purpose, destination, status, and timing. It records metadata only — never request bodies or credentials — and clears when you quit.

Each AI request lists the endpoint it went to: your own provider’s address with a key configured, 127.0.0.1 with a local model, and nothing at all in Offline Mode. To confirm from outside the app, where the app can’t influence what you see, nettop -x -p <pid> shows live connections per process and a firewall like Little Snitch shows the same traffic at the system level.

What to send your security team

If your company wants to vet this before you use it, there’s less to vet than usual, and what’s there can be inspected. Hand them this:

No new vendor relationship to approve. With your own key or endpoint, the transcript text goes to a provider your company already cleared. There’s no data-processing agreement to sign with us, because we’re not in the path — confirmable in the Network Log, not just a claim. And because it’s your key, access is yours to cut: revoke it and every AI call stops, with no dependency on us to offboard.
No integration into your identity provider. It doesn’t connect to your calendar and uses no OAuth sign-in. There’s no third-party app holding standing scopes inside your Google or Microsoft tenant — nothing to surface in an OAuth-app audit, because nothing was ever granted into your workspace.
No central store of your meetings to breach. There’s no account and no server-side copy of your data, so the failure security teams plan for — a vendor gets breached and every customer’s transcripts leak — has nothing to leak here.
The audio never leaves the Mac. It’s captured and transcribed on-device and is never sent on any path. It sits on the machine under whatever disk encryption and device management you already run — not in a new location to govern.
The traffic is watchable. The Network Log inside the app and nettop / Little Snitch outside it let them confirm what leaves the machine, with the full endpoint inventory in the network activity guide.

And two things to be straight with them about, because they cut the other way:

There is no central admin console. IT can push a configuration profile through its MDM that locks every Mac to local-only AI, or to the company’s own endpoint. But no account means no audit dashboard and nothing reports back. For a company that requires centrally-managed, auditable software, that’s a real gap.
Data policy isn’t the only policy. A device or software-installation policy and a recording-consent policy may still apply regardless of where the data goes. Check those too.

A few common questions

Can I use an AI notetaker with my company’s approved AI provider? Yes. Point MimicScribe at any OpenAI-compatible endpoint your company uses, in Settings → AI & Data. The transcript text goes to that provider on your company’s account — not through us.

How do I prove to IT that data isn’t going somewhere it shouldn’t? Use the in-app Network Log to see each request’s destination, then confirm from outside the app with nettop -x -p <pid> or a firewall like Little Snitch. With a local model or Offline Mode, there’s no cloud connection to see at all.

MimicScribe runs on macOS as a menu bar app, started from a keyboard shortcut. Download it, read the custom endpoint setup, or read the full privacy policy.

* Model assisted with language generation.