Your meetings stay yours.
Aside never stores meeting audio. This page explains what we do keep, for how long, and how it is protected.
How a meeting moves through Aside
- On your computer Aside picks up call audio from your mic and speakers. No bot joins the meeting.
- Live transcription Audio streams over an encrypted connection and is discarded as it is transcribed.
- Notes in your account Notes are written from the transcript and saved, encrypted, for you to edit and share.
What we keep, and for how long
- Meeting audio Never stored Streamed for transcription and discarded as it is processed.
- Transcripts 7 days Kept so you can regenerate notes, then permanently deleted.
- Notes Until you delete them The Free plan keeps 30 days of history. Delete any note at any time.
- Account data 30 days after closing Except billing records we are legally required to keep.
How we protect it
Encryption
TLS 1.2 or higher for everything in transit. AES-256 for data at rest, including notes, transcripts and backups.
AI providers
Model providers process transcripts under agreements that forbid training on your data and limit retention. We never use your meetings to train models.
Access control
Production access is limited to a small on-call group, requires SSO with hardware security keys, and every session is logged.
Infrastructure
Hosted with a major cloud provider in the United States, with isolated production environments and daily encrypted backups.
Application security
- Code review on every change
- Automated dependency and secret scanning
- Regular third-party penetration tests
Your controls
Delete a note, a transcript or your whole account from the app, and export your notes at any time. Team admins can set retention for everyone.
Privacy laws and audits
GDPR and CCPA
You can access, export or delete your data from the app or by asking us. A Data Processing Agreement is available for business customers. See the Privacy Policy.
Independent audit
Audit status: to be confirmed before launch. Reports will be shared under NDA with business customers.
Subprocessors
Companies that process data on our behalf. Vendor names will be listed here before launch.
| Purpose | Data involved | Provider | Location |
|---|---|---|---|
| Cloud hosting | Account data, notes, transcripts | To be listed | United States |
| Speech to text | Streaming audio, never stored | To be listed | United States |
| Language model | Transcripts | To be listed | United States |
| Payments | Billing details | To be listed | United States |
| Email delivery | Email address, shared notes | To be listed | United States |
Found a vulnerability?
Email us with the steps to reproduce it. We reply within two business days and will not take legal action against good-faith research.