Should AI Be Allowed to Attend a Confidential Board Meeting?

AI can attend a confidential board meeting, but only on terms the board has set in advance, and some meetings are better off with no AI at all. The safest default for the most sensitive sessions is to switch AI assistance, recording and transcription off. For the rest, allow AI only under controlled settings, with a human approving the minutes. The tools give you these switches. Using them is a governance decision, and it shouldn't be left to whoever books the meeting.

This post sets out what meeting AI actually captures, where that data goes, which settings in Microsoft Teams and Zoom matter for board-level confidentiality, and a tiered approach your company secretary and IT team can agree on. For the broader question of where business data goes when staff use AI tools, see Your Company Data Is Feeding AI. Do You Even Know Where It Goes?

What does an AI meeting assistant actually capture?

Most built-in meeting assistants work from a transcript or from live speech-to-text. Microsoft describes Copilot in Teams as able to summarise discussion points, show who said what and suggest follow-up tasks in real time. Zoom's Meeting Summary with AI Companion likewise uses speech-to-text data to produce a summary after the meeting.

For a board, that means the assistant processes exactly the material a board most wants to protect. That includes unannounced results, merger talks, legal advice, executive performance and frank disagreement between directors. The question isn't whether the AI is clever enough. It's whether creating another copy of that discussion, stored and searchable in a cloud service, fits the board's duty of confidentiality.

Where does the meeting data go, and is it used for training?

Both major vendors make specific commitments, and directors should read them rather than assume.

• Microsoft: Microsoft's Copilot privacy documentation states that prompts, responses and data accessed through Microsoft Graph aren't used to train foundation models. It also says Copilot only surfaces organisational data the individual user already has permission to view, and honours encryption applied through Purview sensitivity labels.
• Zoom: Zoom's AI whitepaper says it does not use customer audio, video, chat, screen sharing or attachments to train Zoom's or third-party AI models. It names Anthropic, OpenAI and Google among the model providers in its federated approach, under what it describes as zero data retention arrangements.

Data location is a separate issue. Microsoft says customers outside the EU may have Copilot queries processed in the US, the EU or other regions, and calls can go to other regions at busy times. Its data residency page lists country-level at-rest commitments only for Copilot Cowork; for Microsoft 365 Copilot and Copilot Chat it refers to the core online services data-at-rest terms, so confirm your tenant's commitments rather than assume where meeting data is stored. Zoom says its region-specific AI processing options currently cover the US, EU and Australia. If your board has rules about where data may be processed, check the current terms with your provider before you approve anything.

Which Microsoft Teams settings matter for a board meeting?

Microsoft gives organisers three Copilot choices for each meeting. The differences matter:

Note the retention point in the second row. Microsoft warns that even with recording and transcription off, Copilot prompts and responses "might be retained for compliance purposes" depending on your Purview retention policies. That isn't a flaw. It's how compliance retention is supposed to work. But the board should know that a question typed to Copilot during a meeting can become part of the records.

For a ready-made approach, Microsoft documents a "highly sensitive" protection tier for Teams meetings. It uses a sensitivity label and meeting templates. Only organisers and co-organisers can bypass the lobby or present. Watermarks go on video and shared content, end-to-end encryption is on, automatic recording is off, and copying chat to the clipboard is blocked. Microsoft notes that meeting options in sensitivity labels and custom templates need Teams Premium.

What about Zoom?

Zoom's support article says only the host and co-host can start or stop Meeting Summary from the meeting controls. Participants see the AI Companion indicator change colour when AI features are active. The host decides whether the summary is shared with participants. Admins can also disable and lock the meeting transcript setting at account or group level. Zoom says that in this configuration it does not keep a persistent transcript, and temporary processing data is discarded after the summary is generated.

One detail matters for boards. Zoom says summary generation can begin as soon as someone starts the meeting, even before the host joins. If the board's rule is "no AI", set that at account or group level rather than relying on the host to remember.

Should every board meeting ban AI?

Not necessarily. A blanket ban is simple, but it pushes directors and staff towards personal note-taking apps the company can't see or control. That risk is the subject of our sibling post The Meeting Was Confidential. So Why Is There an AI Transcript? A tiered rule is usually more workable:

• Tier 1: no AI. In-camera sessions, legal privilege, M&A, executive remuneration and anything market-sensitive. Copilot or AI Companion off, no recording, end-to-end encryption where available, and minutes written by the company secretary.
• Tier 2: live assistance only. Routine governance items. AI may help during the meeting but no transcript is kept, and the secretary drafts the minutes.
• Tier 3: full AI recap. Committee working sessions and operational reviews. A transcript and AI summary are allowed under a stated retention period, and a named person reviews and approves the record. Our companion piece Your AI Meeting Summary Might Be Wrong. Who Takes Responsibility? covers that review step.

Whatever tier applies, attendees should know at the start. Notice and consent are covered in Should Your Meeting Room Be Allowed to Record Everything You Say?

Does the boardroom hardware matter too?

Yes. Software settings protect the cloud side, but the room itself is an endpoint. A managed room system that IT can configure and patch centrally is easier to lock down than a laptop and webcam someone brings in. Teams Rooms systems carry their own room licence, such as the Microsoft Teams Rooms Pro Annual Subscription (S$610.00). We look at the device side in Your Video Conference Is Confidential. But What About the Room Equipment?

An example of a managed all-in-one room system is the Lenovo ThinkSmart One + ThinkSmart Controller for Microsoft Teams (Price on request).

On the data-governance side, the labelling and retention controls referred to above sit in Microsoft Purview. SourceIT lists the Microsoft Purview Suite Annual Subscription (S$185.00) and Microsoft 365 E5 Annual Subscription (S$920.00). Check with your licensing adviser which plan covers the exact features you need. Prices as listed on 25 Oct 2026.

What to do next

• Have the board or audit committee approve a short written AI-in-meetings rule with the three tiers above.
• Set a tenant-wide default (for example, Copilot "On with saved transcript required" or "Off") and create a separate policy for board and committee organisers.
• Build a "board meeting" template that applies your highly sensitive label, so organisers don't have to remember individual switches.
• Confirm Purview retention for Copilot interactions and transcripts, and record it in the board's records policy.
• Check your provider's current data processing locations against any residency requirements your board has.
• Write a rule for personal AI devices and apps in the boardroom. Does Your Company Need a Policy Against AI Recording Devices? has a template approach.

Frequently asked questions

Can Copilot be turned off for a single Teams meeting? Yes. Organisers can set Copilot to Off in meeting options. Microsoft says this also turns off recording and transcription for that meeting, unless an admin policy has locked the setting.

Does Microsoft use board meeting content to train its AI models? Microsoft states that prompts, responses and data accessed through Microsoft Graph aren't used to train foundation models, including those used by Copilot.

Is Copilot available in end-to-end encrypted Teams meetings? No. Microsoft lists Copilot, recording, transcription and live captions among the features unavailable in end-to-end encrypted meetings, which require Teams Premium.

Can Zoom AI Companion start before the host joins? Zoom says meeting summary generation can begin as soon as someone starts the meeting. If your rule is no AI for board meetings, lock the relevant settings at account or group level.

Should AI-generated summaries replace board minutes? No. Treat an AI summary as a draft at most. The company secretary or another named person should prepare and approve the formal minutes.