AI Transcription and Attorney-Client Privilege

Attorney-client privilege protects confidential communications between attorneys and clients made in the context of legal representation. When those communications are recorded and then transcribed using a third-party AI service, three questions arise: Does the transcription service have access to privileged material? Does using that service affect privilege protection? What happens to the data afterward?

These questions have defensible answers. The analysis follows established frameworks for using third-party service providers in legal practice — frameworks developed for stenographers, translators, and document review vendors before AI transcription existed.

Quick Navigation

• The Third-Party Provider Framework
• What "Reasonable Care" Means in Practice
• BrassTranscripts Data Handling Policy
• ABA Guidance on Cloud Computing and Third Parties
• Storing Completed Transcripts
• Client Disclosure and Consent
• Jurisdiction-Specific Considerations
• Frequently Asked Questions

The Third-Party Provider Framework

BrassTranscripts processes privileged recordings the same way a court reporting firm processes a deposition: a service provider receives the material, performs a task, and returns the output. Attorney-client privilege is not destroyed by disclosures to third parties acting as agents in the delivery of legal services.

The leading authority is the case law around interpreters, stenographers, and document review vendors. Courts have consistently held that privilege survives such disclosures when the communication to the third party is made in confidence and in connection with the attorney-client relationship. The third party's access to privileged material is itself privileged when the disclosure is made for the purpose of facilitating legal representation.

The Restatement (Third) of the Law Governing Lawyers §70 addresses this directly: privilege extends to communications involving "a person who is present to facilitate communication between the lawyer and the client." Modern ethics opinions extend this reasoning to technology service providers.

What "Reasonable Care" Means in Practice

Using a transcription service for privileged recordings requires the same diligence applied to any vendor with access to client files. Reasonable care in this context means:

Evaluating the service provider's data practices. What is the retention policy? Is data encrypted in transit and at rest? Is the material used for any purpose other than providing the service? A service that retains audio indefinitely or uses it to train AI models raises different concerns than one with automatic deletion.

Using the service only for what's necessary. Transcribing a recorded client meeting for case preparation — and then downloading and securing the transcript — is a contained use. Storing the audio on the service's servers indefinitely, or sharing transcript links broadly, is not.

Securing the output. The completed transcript contains privileged material. It requires the same access controls as any other privileged document in the client's file.

Keeping current with bar guidance. Several state bars have issued ethics opinions specifically addressing cloud computing, AI tools, and third-party data handling for legal practice. These opinions set the due diligence standard in your jurisdiction.

BrassTranscripts Data Handling Policy

BrassTranscripts enforces automatic deletion of uploaded audio after 24 hours and completed transcripts after 48 hours. No copies are retained after these windows expire. Audio and transcripts are never used for AI model training. Files are encrypted in transit and at rest.

This policy matters for privilege analysis because one of the key factors in third-party provider analysis is whether the provider keeps the material confidential and uses it only for the specified purpose. Automatic deletion within 48 hours means no privileged material persists on BrassTranscripts infrastructure after the attorney has downloaded the completed transcript.

The practical implication: download completed transcripts within 48 hours of processing, then store them in your firm's matter management system. After 48 hours, the transcript is no longer available from BrassTranscripts — which is the point. The privileged content lives in your systems, subject to your firm's security controls, not on a third-party server.

ABA Guidance on Cloud Computing and Third Parties

The ABA's Formal Opinion 477R (2017) is the most relevant national guidance. It addresses the use of technology to communicate client information and sets out a factors-based analysis for determining what "reasonable care" requires when using cloud-based services and third-party providers:

"Lawyers generally may transmit information relating to the representation of a client over the internet without violating the Model Rules of Professional Conduct where the lawyer has undertaken reasonable efforts to prevent inadvertent or unauthorized disclosure."

The opinion lists factors relevant to what level of care is reasonable for a given communication — the nature of the information, the likely threats, the cost of safeguards relative to the risk, and whether the attorney-client relationship permits the method. Standard client meeting recordings submitted for transcription, with automatic 48-hour deletion, sit well within reasonable care under this framework for most matters.

ABA Formal Opinion 498 (2021) addresses virtual practice and the use of technology platforms in legal representation. It reaffirms that competent representation includes understanding the technology used and its benefits and risks.

For the intersection of AI-specifically and confidentiality obligations, the ABA's Center for Professional Responsibility has published guidance notes — search the ABA's professional responsibility resources for the most current position.

Storing Completed Transcripts

The transcript is done. You've downloaded it. Now it needs to go somewhere secure.

The completed transcript is an attorney work product: it was created in connection with legal representation, using client-provided information, for the purpose of case preparation. Work product protection applies in addition to attorney-client privilege for the underlying communications.

Proper storage means:

• Matter-specific folders in your document management system (Clio, NetDocuments, iManage, MyCase, or whatever your firm uses)
• Access controls that limit viewing to attorneys and staff working on the matter
• Not in personal cloud storage (Google Drive, Dropbox personal accounts) without firm-level security controls
• Backed up per your firm's data retention policy for client files

Naming conventions help. IntakeTranscript_[ClientLastName]_[Date].txt stored in the client's matter folder is retrievable; a file named audio_transcript_final.txt on the desktop is not.

For bulk case file transcription — processing 20-100 deposition or interview recordings at once — the batch download gives you all files at once for import into your DMS. The bulk transcription guide for case files covers the workflow.

Client Disclosure and Consent

Recording client meetings and using AI transcription is a combination worth discussing with clients, not because it's legally problematic, but because clients appreciate knowing how their information is handled.

A simple disclosure at the start of intake works: "We record our client meetings to ensure we capture every detail accurately. The recording is transcribed using an AI service that automatically deletes the audio and transcript within 48 hours. We download and store the transcript in your secure matter file. Do you have any questions about that before we begin?"

Most clients have no objection. Some will ask follow-up questions about the AI service, data security, or who has access. A factual answer — automatic deletion, no AI training use, encrypted storage, matter-specific access — typically addresses the concern.

This disclosure is also professionally prudent. Several state bar opinions on cloud computing and technology use recommend, though not always require, informing clients about technology used in the representation. Disclosing recording and transcription practices is consistent with ABA Model Rules 1.4 (communication) and 1.6 (confidentiality).

Jurisdiction-Specific Considerations

National ABA guidance describes the framework; state bar ethics opinions set the specific standard in your jurisdiction. Several states have issued formal opinions directly addressing cloud computing, AI tools, and third-party data handling that go beyond the ABA framework.

States with formal opinions specifically addressing AI in legal practice (as of 2025) include California, Florida, New York, Virginia, and Pennsylvania. These opinions generally follow the ABA framework but may add state-specific requirements around disclosure, vendor evaluation, or data storage. Before adopting any new technology for client data, check your state bar's most recent ethics guidance.

The legal transcription ethics section in our law firm guide covers ABA opinions, common ethics committee guidance, and how to structure a vendor evaluation that satisfies due diligence requirements under most state frameworks.

Frequently Asked Questions

Does Using AI Transcription Waive Attorney-Client Privilege?

Using a transcription service does not automatically waive attorney-client privilege. Courts have held that disclosing privileged communications to third-party service providers — stenographers, translators, transcription services — does not destroy privilege when the disclosure is made in confidence and in furtherance of legal advice. The ABA's Formal Opinion 477R (2017) addresses cloud computing and third-party technology services, confirming that attorneys may use such services provided they exercise reasonable care to prevent unauthorized disclosure. The key factors are: (1) the service keeps the information confidential, (2) the disclosure is limited to what's necessary for the service, and (3) the service is used in connection with providing legal advice.

What Data Does BrassTranscripts Retain After Processing a Transcript?

BrassTranscripts automatically deletes uploaded audio files 24 hours after upload and transcripts 48 hours after processing. No copies are retained after these windows. Audio and transcripts are never used for AI model training. Files are encrypted in transit and at rest using Cloudflare R2 infrastructure with automated lifecycle deletion. This automatic deletion policy means no privileged material persists on BrassTranscripts servers after the 48-hour transcript window.

Should I Inform Clients Before Recording Intake Interviews for AI Transcription?

Yes. Disclosing the recording and your use of a transcription service is both ethically sound and good practice. Most state bar ethics opinions on cloud computing for legal practice require attorneys to exercise reasonable care in selecting service providers and to review those providers' security and data handling policies. Informing clients that meetings are recorded and that an AI transcription service is used — with automatic deletion after 48 hours — is consistent with competent handling of client data. Some clients will have questions; a brief, factual explanation of the data deletion policy typically satisfies them.

How Should Attorneys Store Completed Transcripts to Protect Privilege?

Download transcripts within the 48-hour window after processing and move them immediately to your firm's secure document management system. Attorney-client privilege attaches to the transcript as an attorney work product when created in the context of legal representation. Store transcripts in the client's matter file with appropriate access controls — the same controls you apply to other privileged client documents. Do not store transcripts in shared drives or personal cloud storage without firm-level access controls.