AI tools and client data
Is Read AI safe for client data?
Short answer: Whether Read AI is safe for client data turns on which plan your staff are on, which account they signed in with, and what you have told them they may put in it — not on the product itself. On Free and Pro (personal account) and on Enterprise, Read AI says it does not train its models on what staff type, by default. Every fact on this page is Read AI's own, quoted from its own pages and dated, and where we did not find a statement this page says so rather than filling the gap. Obsidian Ridge's free 30-day AI security assessment shows which AI tools your staff actually use.
See which AI tools your staff usePlan by plan, in Read AI’s own words
A notetaker that also scores the meeting, which means it is measuring the people in it as well as writing down what they said.
| What you are asking | Free and Pro (personal account) | Enterprise |
|---|---|---|
| Trains the vendor's models by default | Read AI's support page says the default is opt out for product improvement. Its privacy policy still lists training among its purposes.“By default all meeting data is set to opt out as it relates to improving the product.” source, read | The same default, and on Enterprise+ an admin can add a retention policy on top of it.“By default all meeting data is set to opt out as it relates to improving the product.” source, read |
| How to turn training off | There is an opt-out for the other people in the meeting, offered in the meeting chat.“we provide notice giving meeting attendees an opportunity to opt out of collection of meeting information” source, read | Not found in the pages we read. |
| How long data is kept | Read AI publishes a ceiling for audio and video: no longer than two years.“in no case for longer than 2 years” source, read | Not found in the pages we read. |
| What an admin can see or control | Not found in the pages we read. | An Enterprise+ admin sets a policy that deletes data on a schedule.“automatically delete data after a certain number of days as specified by the organization.” source, read |
| Single sign-on | Not found in the pages we read. | SAML, and it is a precondition of the agreement rather than an extra.“it is required to set up both SAML authentication and domain capture for the workspace before proceeding with signing the BAA” source, read |
| Business Associate Agreement | Not found in the pages we read. | Annual Enterprise+ only, and Read AI will not sign until SAML and domain capture are set up.“Due to the advanced security features required, this is only supported for users on an annual Enterprise+ plan…” source, read |
| Where the data is processed | Not found in the pages we read. | Not found in the pages we read. |
An empty cell is not a reassurance and not a criticism. "Not found in the pages we read." means the Read AI pages listed under Sources, read on the dates shown, do not answer it — so there is nothing for us to repeat, and something for you to ask Read AI before client information goes near it.
What this means for
The duty does not change because the tool is new. What changes is where the client information ends up.
- Law firms. A client confidence pasted into a personal account has left the firm’s control. Our law firm page sets out the duties we build evidence for; the decision here is whether a personal account may touch a client matter at all.
- Dental and medical practices. Read AI publishes a BAA position for this product, which is where that conversation starts. See dental practices.
- CPA and accounting firms. Your written information security plan has to describe the tools people actually use, not the ones you approved. See accounting firms.
- Financial advisers. Client account data in a personal assistant is the exposure; see financial advisers.
- Software teams. A coding assistant reads the repository and can run commands, so the question is what it can reach, not what it was asked. See what AI agents on work laptops can reach.
How to tell which version your staff use
The plan is the whole answer, and you cannot tell from the outside. Three ways to find out, in order of how much they prove.
1. Ask
Quick, free, and incomplete. People forget the tool they installed once and the account they signed in with.
2. Look at the billing and the admin console
This finds what the business pays for. It does not find a personal account, which is the one that matters here.
3. Look on the computers
A tool somebody installed themselves never appears in an IT list. Obsidian Ridge’s free 30-day AI security assessment takes a quiet inventory for 30 days and shows what each tool could reach, then a CISSP goes through it with you. See the assessment, or read a sample set of findings.
Settings to check today
From Read AI’s own documentation. Each one is a change somebody can make this afternoon.
- Decide about the scoring feature before the notetaking. Read AI says it analyses attendees' faces and speech to score the meeting.“analyzing facial and verbal elements of all meeting attendees to assess how people are reacting” source, read
- Know what is captured: audio and video input and output, the invitee list, and the meeting access details.“meeting audio and visual files from a user's video and audio input and output, meeting location, and any included meeting access details” source, read
Worth knowing
- The policy still reserves training as a purpose, which is worth reading next to the opt-out default.“using information to train and improve our models within our Services” source, read
- Read AI does not publish one retention period; it makes it depend on the plan and the settings.“How long Read keeps your data depends on your plan and settings.” source, read
Questions we get asked
Is Read AI safe for client data?
Whether Read AI is safe for client data turns on which plan your staff are on, which account they signed in with, and what you have told them they may put in it — not on the product itself.
On Free and Pro (personal account) and on Enterprise, Read AI says it does not train its models on what staff type, by default.
Every fact on this page is Read AI's own, quoted from its own pages and dated, and where we did not find a statement this page says so rather than filling the gap.
Does Read AI train its models on what our staff type into Read AI?
On Free and Pro (personal account) and on Enterprise, Read AI says it does not train its models on what staff type, by default. On Free and Pro (personal account): Read AI's support page says the default is opt out for product improvement.
Its privacy policy still lists training among its purposes. Read AI's own words: "By default all meeting data is set to opt out as it relates to improving the product." (read 2026-11-02).
On Enterprise: The same default, and on Enterprise+ an admin can add a retention policy on top of it. Read AI's own words: "By default all meeting data is set to opt out as it relates to improving the product." (read 2026-11-02).
How long does Read AI keep what we put into Read AI?
On Free and Pro (personal account): Read AI publishes a ceiling for audio and video: no longer than two years. Read AI's own words: "in no case for longer than 2 years" (read 2026-11-02). On Enterprise: Not found in the pages we read.
Can an administrator read what our staff typed into Read AI?
An Enterprise+ admin sets a policy that deletes data on a schedule. Read AI's own words: "automatically delete data after a certain number of days as specified by the organization." (read 2026-11-02).
Will Read AI sign a Business Associate Agreement for Read AI?
Annual Enterprise+ only, and Read AI will not sign until SAML and domain capture are set up.
Read AI's own words: "Due to the advanced security features required, this is only supported for users on an annual Enterprise+ plan…" (read 2026-11-02).
A signed BAA is between your practice and Read AI; we do not sign it for you, and we do not read a compliance badge as one.
How do we find out which version of Read AI our staff are using?
Look on the computers. A tool somebody installed themselves, or signed into with a personal account, does not appear in any IT list. Obsidian Ridge's free 30-day AI security assessment takes that inventory for 30 days and shows what each tool could reach.
Sources
Read AI’s own pages, with the date each was read. Nothing on this page comes from anywhere else.
- support.read.ai/hc/en-us/articles/25702259763091-Security-Privacy-Overview, read
- read.ai/privacy-policy, read
All 15 tools, side by side, or run the AI tool risk checker over the ones you know about.
Other tools people ask about
Same question, different answers. The ones in the same category are the ones staff swap between.
Is Grammarly safe for client data?
Writing aid · Grammarly
Is Zoom AI Companion safe for client data?
Meeting notetaker · Zoom
Is Otter.ai safe for client data?
Meeting notetaker · Otter.ai