Which AI Notetakers Can Bankers Use on Deal Calls?
The compliance question comes before the tool question. Here is how deal teams answer both.
In this article
Investment bankers can use only the AI notetakers their firm's compliance team has approved for deal calls. In practice that means a tool whose transcripts and summaries reach the firm's archive under SEC Rule 17a-4 and FINRA Rule 4511, that respects information barriers and that your NDAs allow. Anything else is an off-channel risk.
This guide is vendor-neutral. It covers the four constraints that decide the answer at a bank (MNPI, recordkeeping, client confidentiality and firm approval), the questions to put to any vendor, the calls where a notetaker is a bad idea, and the main tool types. Reline makes an AI notetaker, so the last section says plainly where it stands, including what it lacks for deal work today.
The short answer: notetaker types bankers can and cannot use
| Tool type | How it captures | Recordkeeping fit | Typical verdict at a bank |
|---|---|---|---|
| AI built into the firm's approved meeting platform (for example Microsoft 365 Copilot in Teams) | Inside the platform the firm already licenses and controls | Microsoft documents Purview retention policies for Copilot prompts and responses, searchable with eDiscovery | The most common route to approval, once compliance has configured retention |
| Meeting platform plus a compliance archiving vendor (for example Zoom with Smarsh) | The platform records; the archiving vendor captures the content | Smarsh says it captures Zoom meeting, phone and chat content | Common at regulated firms. Check that AI-generated notes are captured too, not only the recording |
| Standalone notetaker that sends a bot into the call | A bot joins as a visible participant; data sits in the vendor cloud | Only if the vendor delivers transcripts and notes to your archive | Often blocked on external calls; counterparties see the bot |
| Standalone bot-free notetaker on the desktop (Reline is one) | Audio is captured on the banker's device; no participant joins | Only if the notes reach your archive; disclosure is up to the user | Rarely approved for client deal calls without an archiving integration |
| Personal app on a personal phone or account | Outside every firm system | None | Off-channel. Do not use for firm business |
Why deal calls are different
MNPI and information barriers
Deal calls are full of material nonpublic information. Section 15(g) of the Securities Exchange Act requires registered broker-dealers to have written policies and procedures, suited to their business, that prevent the misuse of MNPI. The SEC staff calls these controls information barriers.
"establish, maintain, and enforce written policies and procedures reasonably designed" (SEC staff report on Section 15(g), 2012)
An AI notetaker makes new copies of that information: a recording, a transcript, a summary, maybe a chat history and a message in Slack. Each copy needs to sit on the right side of the wall. Ask who can open it by default, whether search or an AI assistant can reach notes from another deal team, and whether a summary can be posted to a channel outside the wall.
Recordkeeping: SEC Rule 17a-4 and FINRA Rule 4511
FINRA's books and records guidance summarizes the core rules. Under Exchange Act Rule 17a-4(b)(4), broker-dealers keep communications relating to their business as such for at least three years, the first two in an easily accessible place. That covers internal and external electronic communications on any platform, and a firm may not allow a type of electronic communication it cannot record and keep. FINRA Rule 4511 sets a six-year default where no other period applies and requires the format and media that Rule 17a-4 allows: an electronic system with a time-stamped audit trail, or write-once (WORM) storage. Outsourcing recordkeeping to a vendor does not move the responsibility.
Is an AI transcript or summary a business communication? FINRA has not settled that. Regulatory Notice 25-07 (April 2025), a request for comment on modernizing FINRA rules, asks firms what recordkeeping challenges AI-generated communications raise and gives AI-generated transcripts or summaries of meetings as an example. It does not propose a rule. Regulatory Notice 24-09 (June 2024) says FINRA rules are technology neutral and apply to generative AI, including features embedded in third-party products. The 2026 FINRA oversight report suggests storing prompt and output logs. Until your compliance team decides otherwise, treat AI notes from deal calls as records.
Off-channel communications enforcement
On September 27, 2022, the SEC charged 16 firms, which agreed to pay more than $1.1 billion in combined penalties for failing to keep electronic communications. On August 14, 2024, 26 more firms agreed to pay $392.75 million. The rules behind those cases, Rule 17a-4 and FINRA Rule 4511, still apply. A notetaker your firm cannot capture is the same gap as a business text on WhatsApp.
Client confidentiality and NDAs
Engagement letters and NDAs with counterparties limit who may receive confidential information, and some limit how it may be stored or shared with third parties. A notetaker vendor and its AI providers are third parties. The SEC staff report notes that, under Rule 10b5-2, a duty of trust or confidence exists whenever a person agrees to keep information confidential. Read the NDA's definition of representatives and ask counsel whether a software processor fits it.
Firm IT and compliance approval
Banks restrict which software employees can install and which meeting tools they can use. Installing an unapproved notetaker breaks policy, however good the tool is. The usual path: a request through IT, a compliance review of recordkeeping, surveillance and information barriers, and a legal review of the DPA and subprocessors.
What to ask a notetaker vendor before a deal call
| Question | Why it matters on a deal team | A good answer |
|---|---|---|
| Archiving: can our archive (for example Smarsh, Global Relay or Microsoft Purview) capture recordings, transcripts, summaries and AI chat answers automatically? | Rule 17a-4 and Rule 4511 apply to the records, not to the tool | A native connector or an automatic export with metadata, not a manual download |
| Retention: can compliance set retention periods and legal holds? Can users delete notes? | A user who deletes a record can break the retention schedule | Admin-set retention, and holds that override user deletion |
| Identity: SAML or OIDC SSO, and SCIM deprovisioning? | A leaver should lose access to deal notes the day they leave | Enforced SSO plus SCIM |
| Access: are notes private by default? Can admins or workspace search reach every deal? | Information barriers | Per-deal spaces, no default workspace-wide visibility, AI search limited to what a user can open |
| Audit logs: are shares, exports and permission changes logged and exportable? | Investigations and wall-crossing reviews need a trail | A sample log export |
| Data location: where are data stored and where does the AI run? Which AI providers process it? | Client contracts and cross-border rules | A written subprocessor list with locations |
| AI training: is our content used to train models, by you or your AI providers? | MNPI must not end up in a model | A written no-training commitment that covers AI providers |
| Security reports: SOC 2 Type II, ISO 27001, a pen test summary? | Third-party risk review at the bank | The report, shared under NDA |
| Capture and disclosure: does a bot join, or is audio captured on the device? How are participants told? | Consent laws and counterparty trust | A clear, repeatable disclosure method |
When an AI notetaker is a bad idea
- Compliance has not approved the tool for client or deal communications.
- The notes would land outside the wall: a shared workspace, a personal account, a chat channel.
- Someone is being brought over the wall and compliance has not yet logged it.
- The NDA or the counterparty restricts recording or third-party processing, or someone on the call objects.
- Counsel is present for privileged advice. Recording can create discoverable copies.
- You are on a personal device or a personal account.
- The AI summary would be the only record of what was agreed. Summaries can drop or misstate a point, so a person should check them against the transcript.
A safer workflow when your firm allows it
- Use only the firm-approved tool, signed in with your firm account.
- Tell everyone at the start of the call, and follow consent law in each participant's location.
- Keep one space per deal, with access limited to the deal team list that compliance maintains.
- Review and correct the AI notes the same day. The transcript is the source; the summary is a draft.
- Confirm the record reached the archive. Do not keep side copies in downloads, personal apps or forwarded emails.
- Do not post deal notes to chat channels outside the wall.
- At signing, close or termination, follow the retention schedule, not personal habit.
Where Reline stands today
Reline is bot-free: it captures microphone and system audio locally on Mac, Windows, Linux (beta) or in the browser, then transcribes, summarizes and stores it in the cloud. Data is hosted in the United States, with the database on Convex and recordings on Cloudflare R2.
| Control | Reline today |
|---|---|
| Bot-free local capture; no participant joins the call | Live |
| Private-by-default notes; a workspace role grants nothing on its own | Live, every plan |
| Per-note activity log (share, edit, restore, access grant) | Live, every plan |
| Admin data controls: export, copy and move-out switches | Live, every plan |
| Workspace audit log (membership, settings, policy events) | Live, Enterprise |
| SSO with Google and Microsoft via WorkOS | On request, Enterprise |
| Generic SAML SSO and SCIM | Roadmap |
| Archiving integration (Smarsh, Global Relay, Microsoft Purview) | Not available |
| Admin-set retention schedule and legal hold | Not available; deleted notes leave the trash after 30 days |
| DPA, public subprocessor list, no training of third-party models on your data | Live |
| EU data region | Roadmap |
| SOC 2 Type II report | Roadmap; no report today |
The plain verdict: if you work at a broker-dealer and the call is a client or deal communication, Reline is not the right tool today. It does not feed your firm's archive, it has no retention or legal-hold controls, and it has no SOC 2 report. Teams outside broker-dealer recordkeeping, such as some corporate development teams, still carry MNPI and NDA duties and should run the vendor questions above with their own counsel. Our DPA is at reline.so/dpa.
Common questions
- Can investment bankers use AI notetakers on deal calls?
- Only the ones their firm's compliance team has approved. At a broker-dealer that usually means the notes reach the firm's archive under SEC Rule 17a-4 and FINRA Rule 4511, access respects information barriers, and the NDA allows a third-party processor. This is not legal advice; ask your compliance team.
- Are AI meeting summaries business records under SEC Rule 17a-4?
- Not settled. FINRA Regulatory Notice 25-07 (April 2025) asks firms what recordkeeping challenges AI-generated communications raise, naming AI-generated transcripts or summaries of meetings as an example, but it does not decide the question. Until your compliance team rules on it, the cautious approach is to treat them as records.
- How long must broker-dealers keep business communications?
- Rule 17a-4(b)(4) requires at least three years, the first two in an easily accessible place. FINRA Rule 4511 sets a six-year default for FINRA records with no specified period. Your firm's schedule may be longer.
- What are off-channel communications?
- Business communications on channels the firm does not capture and keep, such as personal texting apps. The SEC brought large recordkeeping cases over them, against 16 firms in 2022 and 26 firms in 2024. An unapproved AI notetaker creates the same gap.
- Is a bot-free notetaker safer for deal calls?
- Not automatically. No bot appears in the call, which can feel less intrusive, but the duty to tell participants and the archiving question both stay with you and your firm.
- Does Reline integrate with Smarsh or Global Relay, and is it SOC 2 certified?
- No to both today. Reline has no archiving integration, no admin retention schedule or legal hold, and no SOC 2 report; SOC 2 Type II is on the roadmap. It signs a DPA and publishes its subprocessor list.
Related posts

AI Notetaker IT Admin Checklist: 12 Controls to Verify
The vendor-neutral checklist IT uses to approve an AI notetaker: SSO, SCIM deprovisioning, team-scoped access, retention, Slack scopes and rollout.

Confidential Client Meeting Notes for Consultants
Client meeting notes template for consultants, plus how to keep confidential client notes isolated per engagement so Client A never reaches Client B.

Is it safe to let an AI notetaker record your meetings? A team's guide to the real risks
AI notetaker safety comes down to three things: whether a bot joins, where the audio goes, and who can see the notes. A team's honest risk guide.
Stop taking notes.Start shipping outcomes.
Free forever for individuals. Five minutes to install. Your next meeting writes its own notes.