Zoom AI Companion for Lawyers: A Privilege-First Review
Zoom AI Companion is the AI assistant bundled with paid Zoom Workplace accounts. It writes meeting summaries, generates action items, drafts chat replies, and answers questions about a meeting in progress. For lawyers, the appeal is obvious: the tool you already use for depositions, client intake, and internal calls now offers to do your note-taking. The harder question is whether it belongs anywhere near a privileged conversation.
Disclosure: Basil, which publishes this review library, competes with Zoom AI Companion in the meeting-notetaker category. I have tried to keep this review to architectural facts and cite vendor documentation where possible. If you want to see how a different design tradeoff looks, Basil for Law is the on-device alternative I build; otherwise, this piece is about Zoom.
What Zoom AI Companion Actually Does
AI Companion is a feature layer that spans Zoom Meetings, Team Chat, Mail, Whiteboard, and Phone. In a meeting, the host can enable Meeting Summary and/or Smart Recording; participants see an on-screen indicator that AI Companion is active. After the meeting, the host receives an emailed summary with next steps, and participants can be granted access. During the meeting, users can ask questions like "what did I miss" or "was my name mentioned" via a side panel.
Beyond meetings, AI Companion can summarize unread chat threads, draft chat and email replies in your voice, and produce voicemail transcriptions. Zoom has been rolling out a more agentic version that can schedule meetings and take multi-step actions across the Workplace suite. Full feature list is on the Zoom AI Companion product page.
Two important defaults to know. First, AI Companion is off by default per meeting and must be started by the host, though account admins can configure it to auto-start. Second, when enabled, it is a host-controlled feature: the host owns the summary, decides who receives it, and can turn features on or off mid-meeting.
The Confidentiality Lens
This is where lawyers need to slow down. AI Companion is a cloud service. Audio, transcripts, and generated summaries move through Zoom's infrastructure and, in some configurations, through third-party model providers. Zoom's public position, stated in its AI trust and privacy page, is that it does not use customer audio, video, chat, screen-sharing, attachments, or other communications-like content (such as poll or whiteboard content) to train its or third parties' AI models. That is a meaningful commitment and Zoom updated its terms in 2023 after public pushback to make it explicit.
What Zoom does retain is another matter. Meeting summaries and post-meeting artifacts are stored in the host's Zoom account until the host deletes them, and admins can access them under normal Zoom account controls. Zoom uses a mix of its own models and third-party foundation models (historically including OpenAI and Anthropic, plus Meta Llama for some features), and calls to third-party providers are made on a no-retention basis according to Zoom's documentation. Details, including the current model routing, are in the AI Companion support article.
For a practicing lawyer, three concrete risks follow from that architecture:
- Discovery reach against the vendor. A subpoena served on Zoom could reach transcripts, summaries, and metadata still resident in the account, plus logs of who accessed them. Zoom's law enforcement and legal process guidelines describe what it produces on valid process. This is not a Zoom-specific flaw, but it is a real fact about cloud transcripts that did not exist when the only artifact of a call was your handwritten notes.
- Account-owner visibility. When opposing counsel or a third party hosts the meeting, they own the AI-generated summary of your remarks. If you are a guest on a client's or an adversary's Zoom, assume the host can retain a transcript of what you said.
- Privilege leakage through participants. Because AI Companion posts a persistent indicator and can be started mid-meeting, non-parties (an assistant, a co-defendant's rep, a witness) who stay on the line may end up in a transcript that later becomes producible. See Brewer v. Otter.ai (N.D. Cal. 2025) for a live illustration of transcript-sharing exposure in the notetaker category.
Zoom offers a BAA for healthcare customers on qualifying plans, and a Data Processing Addendum is available via its trust center. There is no legal-industry-specific certification, and none is required — Model Rule 1.6(c) requires reasonable efforts, not certification.
Ethics-Opinion Fit (ABA 512)
ABA Formal Opinion 512 (July 2024) on generative AI reframes the analysis lawyers were already doing under Rules 1.1, 1.6, 5.3, and 1.5. Three of its themes land squarely on AI Companion:
- Understand the tool. Opinion 512 tells lawyers to read the terms and know whether inputs train the model, where data is stored, and who at the vendor can see it. Zoom's terms and trust pages are clearer than most, but reading them once and moving on is not the exercise the opinion contemplates — vendor policies change.
- Informed client consent when confidential information is input. Even if AI Companion does not train on your data, you are still disclosing client confidences to a third-party processor for a purpose (AI summarization) beyond the underlying representation. For matters where the client has not consented to third-party AI processing, running AI Companion on their call is a Rule 1.6 issue.
- Supervision under 5.3. If associates or staff routinely enable AI Companion on client calls, the firm needs a written policy on when it may run, who can access summaries, and how long they are retained. NYC Bar Formal Opinion 2025-6 (Dec 2025) is worth reading alongside 512 for a more recent state-bar synthesis on generative AI supervision.
One privilege datapoint worth internalizing: in US v. Heppner (S.D.N.Y. Feb 2026), Judge Rakoff held that a litigant's chats with a public AI platform were not privileged. That case involved a consumer chatbot, not a Zoom meeting between lawyer and client, and the attorney-client analysis is different — but the underlying instinct ("a third party heard it, so think carefully about privilege") is the same one that should govern AI Companion use.
Pricing and Who It's For
AI Companion is included at no additional cost with paid Zoom Workplace plans (Pro, Business, Business Plus, and Enterprise) for the user hosting the meeting. Some newer agentic and premium AI Companion capabilities are sold as add-ons. Current pricing and plan inclusions are on the Zoom pricing page; because Zoom periodically restructures the AI tiers, I would rely on that page rather than a number I quote here.
Who it fits well:
- Firms already standardized on Zoom Workplace who want summaries of internal, non-privileged meetings (staff meetings, CLE debriefs, vendor calls).
- In-house teams whose employer already has an enterprise Zoom agreement with a signed DPA and, where relevant, a BAA.
- Lawyers who want a summary of a hearing prep or moot with colleagues, where every participant is inside the privilege circle and has consented.
Who should think harder:
- Solo and small-firm lawyers taking client calls on Zoom Pro without a negotiated DPA.
- Litigators taking witness statements, doing settlement calls with opposing counsel, or hosting joint-defense meetings — situations where a stored cloud transcript is exactly the artifact you do not want.
- Anyone whose engagement letter does not address AI processing of client communications.
How It Compares Architecturally
The main axis of difference in the notetaker market is where processing happens. AI Companion is cloud-processed with vendor retention until the host deletes. Otter, Fireflies, and Read.ai sit at similar points on that axis with different training-use postures. Microsoft Copilot in Teams is analogous to AI Companion within the Microsoft 365 boundary. On-device notetakers like Basil keep audio and transcripts on the lawyer's machine and never send them to a vendor server — which changes the subpoena-against-the-vendor risk to zero because there is nothing at the vendor to subpoena, at the cost of the cross-device convenience that a cloud service provides. Neither approach is right for every matter; the point is to match the tool to the sensitivity of the call.
Verdict
Zoom AI Companion is a competent, well-integrated meeting assistant with better privacy hygiene than most of its cloud peers. It is a reasonable choice for internal firm meetings and low-sensitivity external calls on a properly configured enterprise account with a signed DPA. It is not the right tool for calls where the presence of a cloud transcript would materially change your risk posture in later discovery, and it should never run on a client call without informed consent.
| Pros | Cons |
|---|---|
| Included at no extra cost with paid Zoom Workplace plans | Cloud processing; transcripts and summaries retained in the host account |
| Explicit vendor commitment not to train models on customer content | Host — potentially opposing counsel or a third party — owns the summary of what you said |
| On-screen indicator and host controls; off by default per meeting | Admins can enable auto-start and access artifacts under normal account controls |
| BAA available on qualifying plans; DPA available via trust center | Uses third-party foundation models under the hood; routing changes over time |
| Deep integration across Meetings, Chat, Mail, Phone | Adds a subpoenable data source that did not exist before you enabled it |
This review is for information only and is not legal advice.
Frequently asked questions
Does Zoom use my meeting content to train its AI models?
Zoom's public position, stated on its AI trust page, is that it does not use customer audio, video, chat, screen sharing, attachments, or communications-like content (including poll and whiteboard content) to train its own or third-party AI models. That commitment was added after Zoom updated its terms in 2023. It does not eliminate other confidentiality concerns, such as retention of summaries in the host account or third-party subprocessor access.
Can I use Zoom AI Companion on a client call without violating Rule 1.6?
Not automatically. Rule 1.6(c) requires reasonable efforts to prevent unauthorized disclosure, and ABA Formal Opinion 512 (July 2024) directs lawyers to consider informed client consent before inputting confidential information into a generative AI tool. Practically, that means updating your engagement letter, disclosing that AI Companion will run and that a summary will be stored in your Zoom account, and honoring a client's request that it be turned off.
If opposing counsel hosts the Zoom, can they keep an AI summary of what I said?
Yes. AI Companion is a host-controlled feature. The host account receives and stores the meeting summary and can share it with participants at their discretion. If you are a guest on a Zoom you do not control, assume any AI summary belongs to the host. You can ask the host to disable AI Companion, and the on-screen indicator should tell you whether it is running.
Is Zoom AI Companion HIPAA-compliant for healthcare-related legal work?
Zoom offers a Business Associate Agreement for qualifying healthcare customers on eligible plans, and its trust center documents which features fall inside that scope. HIPAA compliance depends on both a signed BAA and configuring the account per Zoom's guidance. It is not automatic on a standard Zoom Pro account, so confirm your plan tier and BAA status before running AI Companion on protected health information.
What data could a subpoena served on Zoom actually reach?
Under Zoom's law enforcement guidelines, valid legal process can reach subscriber information, meeting metadata, and stored content in the account, which for AI Companion users would include retained transcripts and summaries. This is not unique to Zoom; it is a property of any cloud notetaker. The mitigation is to limit what gets stored (turn off recording and AI features for sensitive calls), delete summaries promptly, and consider on-device alternatives for the most sensitive matters.
How does Zoom AI Companion compare to standalone notetakers like Otter or Fireflies?
The main differences are integration and training-use posture. AI Companion is bundled with Zoom Workplace and does not need a bot to join the call, whereas Otter, Fireflies, and Read.ai typically join as a separate participant and work across meeting platforms. Zoom's no-training commitment is more explicit than some competitors. All three share the underlying cloud-retention risk profile discussed in the confidentiality section above.
Meeting notes with no server to subpoena
Basil transcribes and summarizes entirely on-device — privilege-safe by architecture. See Basil for Law →
This review is for information only and is not legal advice.