The Room Remembers

Bad month to be an AI notetaker.

In early August a security researcher published findings on tl;dv showing an exposed database with 181,874 meeting records across 84,312 users, with roughly a thousand of them marked as actively recording at any given moment. Some of the exposed material included government meetings. The researcher says the issue was first reported back in January and was still reachable in late July.

Separately, a federal complaint landed in California against Granola, alleging it recorded a participant without notice or consent and used meeting contents by default for commercial purposes unless the user turned that off. That one's still early. And the Otter.ai class action from last year is still grinding along.

So this seemed like a good week to look hard at the notetaker I actually use, which is Fathom, and which I get paid to recommend. That second part matters. Read the rest with the appropriate squint.

Fathom joins your Zoom, Google Meet, or Teams call as a visible participant, records, transcribes, and hands you a summary with action items. That's the category. Everyone does that.

I've run it for about eighteen months across sales calls, client sessions, and internal stuff. I've tried most of the alternatives. Here's what actually separates it.

It shows up as itself. The bot appears in the participant list as "Fathom Notetaker." Everyone in the room can see it. Nobody has to be told.

Two weeks ago that was a minor design preference. Now it's the whole ballgame. The core allegation against Granola is that it recorded without visible presence, in contrast with tools that visibly join and announce themselves. Whatever happens with that case, the direction is obvious: consent is becoming the thing that gets litigated, and a bot everyone can see is a much easier position to defend than a bot nobody noticed.

That's not a feature I'd have paid extra for. It turns out to be worth more than most of the features I would have.

The summaries are usable without editing. This is where most tools quietly fail. You get back something structurally correct that you'd never send to anyone. Fathom's are close enough to send, most of the time, with a scan.

Where it's genuinely good is action items. It picks up commitments reasonably well, including the vague ones, the "I'll get you something on that by end of week" that nobody wrote down and everyone forgot. For anyone running client work, that alone is worth the money.

The free plan is real. Unlimited recording, unlimited transcription, unlimited storage, no time limits. That's unusually generous and it's why I recommend people start there rather than trusting me.

Read the next section before you get excited about that.

It does not train on your data. Their position is that customer data isn't used for AI training and you can request deletion. SOC 2 Type 2, GDPR, HIPAA compliance claims on the security page. I have not audited any of that and neither has anyone else you'll read this week, so treat it as what the vendor says rather than what's been verified. But it's the right claim to be making, and it's more than some competitors say.

The free plan used to be "unlimited everything." It isn't anymore.

Advanced AI summaries are now capped at five calls a month on free. Past that you get the basic chronological transcript format, which is a transcript with timestamps, not a summary. Unlimited recording and transcription stayed unlimited. The intelligence layer got metered.

I'm not mad about it. Free tiers that cost the vendor real inference money don't survive forever and anyone who thought otherwise wasn't paying attention. But it does change the advice.

If you run two or three meetings a week and mostly need a searchable record, free is still excellent and you should stay there indefinitely. If you run ten or more and you want the summary on each one, you'll hit the cap in the first week of the month and the free plan will feel broken rather than limited, which is a worse experience than a lower cap honestly stated.

Which brings us to the pricing, where there's a trap.

As of this summer, four tiers.

Free. Unlimited recording, transcription, storage. Advanced summaries capped at five calls a month.

Premium. Twenty dollars a month, or sixteen on annual. Unlimited AI summaries, action items, follow up emails, and the integration hooks that let you push a summary straight into Make or your CRM. This is the solo operator tier.

Team. Nineteen a user monthly, fifteen annually. Adds shared repository, team playlists, call metrics, admin controls. Two seat minimum.

Business. Thirty four a user monthly, twenty five annually. Adds CRM field sync, deal views, and coaching metrics. If you run Go High Level or similar, this is the tier that writes back into it.

Here's the thing that catches people, and it's a good one. Team is cheaper per seat than Premium. Fifteen against sixteen on annual. So the obvious move looks like putting everyone on Team.

But Team requires two seats. If you're solo, you're on Premium at sixteen, paying more per seat than a two person team pays. If you're solo and you sign up for Team to save the dollar, you're buying a seat you don't use and paying thirty.

Not a scandal, just badly signposted. Solo, take Premium. Two or more, take Team. Only go Business if you genuinely need the CRM writeback, and be honest about that, because the jump from fifteen to twenty five a seat is a sixty seven percent increase for a feature a lot of teams use twice and forget.

One thing I'll give them: ninety day money back guarantee on paid plans. That's the most generous window in this category by a distance, and it's long enough to actually find out whether the thing fits your week rather than whether it demos well.

Quick orientation, because nobody buys the first tool they read about.

Against Otter. Otter has been around longer and has better transcript editing. It also has an ongoing class action about recording non users without consent, which is the exact risk category that got expensive this month. Otter's free tier is more restrictive on minutes. I'd take Fathom.

Against tl;dv. Genuinely good product, competitive pricing, EU hosting for anyone who needs it. And an August that included a hundred and eighty thousand exposed meeting records and a disclosure timeline that reads badly. They've acknowledged and patched it. Whether that's disqualifying is your call, but I'd want to see twelve quiet months before I moved a business onto it.

Against Granola. The nicest interface in the category by some distance, and it works differently, sitting on your machine rather than joining as a bot. That's a real architectural advantage for anyone who hates the bot in the room. It's also the subject of the consent complaint filed this month, and the "no visible participant" design is exactly what's being litigated. Watch that one.

Against doing nothing. Underrated option. If you run three calls a week and you already take decent notes, an AI notetaker adds a recording liability in exchange for time you weren't losing. Not every tool needs adopting.

Twenty minutes, and the defaults are not what you want.

Turn off automatic joining for everything. Fathom will happily attend every meeting on your calendar. You don't want a transcript of your one to one with your accountant sitting in a workspace you share. Set it to join manually, or restrict it to specific meeting types.

Set default sharing to private. Not "anyone with the link." This is the single setting that separated the people who got hurt by the tl;dv business from the people who didn't, and it takes one click.

Put consent language in your calendar invite template. One line: "This call may be recorded and transcribed for notes. Let me know if you'd prefer not." Then say it out loud at the start anyway. Belt and braces, four seconds, and it converts a legal question into a courtesy.

Decide what you don't record before you need to. Write it down. Mine is anything involving credentials, anything involving a personnel matter, and any first conversation with someone who hasn't met me. That last one is a business judgment rather than a legal one, but a bot in the room changes how people talk and the first call is where you most need them talking freely.

Accuracy is good, not magic. Independent testing puts average accuracy somewhere around the high eighties, hitting the mid nineties on clean audio and dropping into the seventies when conditions get rough. That matches my experience exactly. One person on a decent headset, excellent. Four people in a conference room around a laptop mic with someone on speakerphone, you're getting a rough approximation and you should not quote from it.

Practical consequence: don't paste a transcript quote into anything that matters without listening to the audio at that timestamp. Takes ten seconds. Saves an embarrassing conversation.

Transcript editing is basic. You can fix speaker attribution and correct errors, but it's clunkier than tools built around editing as a first class activity.

Teams support is the weakest of the three platforms. Works, but I've had more failures to join and more odd behaviour there than on Zoom or Meet. If your business lives entirely in Teams, trial it hard during those ninety days.

And support response times come up repeatedly in user reports, especially on integration issues. I haven't needed them much, which is either a good sign or a lucky one.

Three groups, and I'd genuinely rather you skipped it than regretted it.

Anyone whose calls carry privilege or regulated confidentiality. Lawyers, therapists, anyone handling material where a third party processor creates a discovery problem. The issue isn't Fathom's security posture, it's that you're creating a detailed, timestamped, permanent record of conversations that previously left no artifact. That record is discoverable. Legal commentary has been flagging this for a while and the tl;dv business made it concrete. If your professional body has an opinion, go read it before you install anything.

Anyone operating in a strict two party consent state without a consent process. The bot being visible helps a lot. It is not the same as consent, and "it was in the participant list" is a thin position if somebody decides to make it an issue. Get the language into your invite and say it out loud at the top of the call. Both. It takes four seconds.

Anyone whose meetings don't produce commitments. If your calls are mostly status updates and vibes, an AI notetaker gives you searchable records of things nobody was going to act on. The value here is entirely in capturing decisions and follow ups. No decisions, no value, and you've added a bot to the room for nothing.

For a small business running client calls and sales conversations, Fathom is the one I'd pick. Start free. If you hit the five summary cap and it annoys you, that's your signal to pay, and sixteen a month is a fair price for what it does.

The visible bot is the thing I'd weight highest right now, and I say that as someone who thought it was a minor detail until this month. When the litigation and the breaches in your category are both fundamentally about who knew they were being recorded, being the tool that announces itself stops being a design choice and starts being a moat.

One honest caveat on all of this. Everything above about security and data handling is what the vendor states. That was also true of the tools that had a bad August. The lesson from tl;dv isn't "pick a better vendor," it's that a compliance badge and a disclosure track record are different things, and only one of them tells you what happens when a researcher emails them in January.

So do the boring bit. Set your default sharing to private, not link accessible. Audit who's on your workspace quarterly. Don't record the call where you read out an API key. And keep your own export, because a meeting archive you can't take with you is a meeting archive somebody else controls.

Jordan

The AI Newsroom is written by Jordan Hale. This issue contains affiliate links to tools I actually use. If you sign up through them I may earn a commission at no extra cost to you.