Security and trust

Understand the boundary.
Make an informed choice.

Core meeting intelligence runs on the appliance. A responsible deployment also considers people, access, retained records and the copies you choose to share.

What runs where

Local processing.
Deliberate sharing.

01

Capture and transcription

Audio is captured for local transcription. No cloud upload is required for this core workflow.

02

Structured notes and Theia

The on-device AI works with the meeting record. Outputs need checking by your team.

03

Vault and exports

Records are held in the device vault. PDF, DOCX and TXT exports are deliberate copies outside that vault.

Encryption is one part
of the picture.

The device vault uses AES-256-GCM encryption with configurable password protection. Vault keys are derived using PBKDF2-HMAC-SHA256 at 240,000 iterations. With password protection enabled, the vault must be unlocked before listing, loading, recording or saving sessions.

Vault coverage includes session metadata, transcript segments, structured note JSON, snapshots, Theia conversation messages, the encrypted index and retained audio. Establish the exact software version and configuration being tested.

Assess how the device is accessed, how passwords and recovery are managed, and how updates and support are handled. Local processing does not remove those responsibilities.

Read the product facts

A local architecture.
A clear data path.

Production devices have no Wi-Fi hardware, and the appliance sends no telemetry to Noter. No cloud account or meeting bot is required for the local recording workflow.

Audio capture → on-device transcription → speaker attribution → structured note and snapshot → local Theia → encrypted vault → a user-approved export.

Raw audio can be retained or removed separately from the transcript and note. Agree a retention and deletion policy for each record type. Exported PDF, DOCX and TXT files sit outside the vault and need controls in their destination system.

Your organisation
sets the context.

A document being checked by hand with a pen.
AI-generated illustrative photograph.
  • Agree an appropriate recording purpose and inform participants.
  • Restrict access to the device and the records it holds.
  • Check generated notes before relying on or distributing them.
  • Apply access and retention controls to exported copies.
  • Evaluate suitability for the data and meeting types you propose.

Noter Vault is not a guarantee of legal privilege, regulatory compliance or suitability for a particular security classification.

Evidence before
assurance claims.

Bring your security questions to a demonstration. Discuss the current evaluation scope, tested configuration, data flow, known limitations and the supporting material your review needs.

Website enquiries are separate from appliance processing. Choosing to send an enquiry shares its contents with the Noter team; do not include sensitive meeting information.

Discuss your requirements