How NoteWave Protects Meeting Data
Understand account access, encryption, and your options when sharing a meeting.
2 min read, updated
On this page
Our approach
NoteWave uses reasonable technical and organisational measures to protect your meeting recordings, transcripts and personal data. This guide explains the main protections. No single control is a complete guarantee, so they work together.
Encryption
While data moves
HTTPS/TLS protects supported data moving between your device and NoteWave services.
While data is stored
Managed database and private storage services apply encryption at rest and access controls.
Sign-in and access
- Connected sign-in: sign in with Google, Apple or Microsoft without sharing that password with NoteWave.
- Protected sessions: signed session tokens and server-side checks help protect account access.
- Passwords: password accounts use managed authentication and secure password storage.
- Email verification: email ownership is verified where it applies.
Keeping accounts separate
Database rules help keep each account’s records apart and enforce owner, sharing and team access.
- Meetings and transcripts belong to their owners.
- Shared transcripts are checked against the permission you gave.
- Team data needs team membership.
- Payment and subscription data belongs to one user.
These rules work alongside checks in the application and regular security review.
Where your data is processed
NoteWave uses managed application, data, processing and billing services, with technical and contractual safeguards suited to each one.
- Application hosting runs the product and its protected processing services.
- Managed data services provide the database and private file storage.
- Specialist AI services process the limited data needed for transcription and AI features.
- Secure billing services handle card entry, store purchases and payment verification.
Messages from connected services are verified before NoteWave acts on them. Service providers process data under the arrangements described in our Privacy Policy.
Monitoring and backups
NoteWave and its infrastructure services record relevant operational and security events, so failures, abuse or suspicious activity can be investigated. Managed infrastructure includes recovery and continuity controls. Don’t treat NoteWave as your only archive for critical records.
If there’s a security incident
If we become aware of a security compromise involving personal information, we will investigate, take reasonable steps to contain and fix it, and give notifications where the law requires them. That includes notice as soon as reasonably possible where required, the information available about what happened, and practical steps you can take.
What you can do
No system is completely secure, and you play a part in protecting your account.