Everyone wants an AI agent right now. We want AI that can prepare us for meetings, answer emails, search through our work, update the CRM and eventually just get things done for us. That’s where this is going. AI is moving from something you open when you need help to something that is always there, working alongside you. Less like another tool and more like an AI teammate.
We also maintain SOC 2 Type II, GDPR and HIPAA compliance.
Microsoft says Copilot follows a company’s existing permissions and that its business data isn’t used to train its foundation models. Google says Gemini for Workspace follows existing Workspace protections and doesn’t use customer data to train its generative AI models without permission. Zoom says it doesn’t use customer communications to train its own or third-party AI models. “Trust us” isn’t a security policy.
Security shouldn’t be something companies think about after they buy an AI product. It should be part of deciding which AI products they trust in the first place. There’s a reason companies are starting to make these promises much clearer. Security is becoming part of the product. This becomes even more important when AI has access to conversations. Think about what gets discussed in meetings: customers, employees, hiring, strategy, financials and plans that may never be written down anywhere else. Companies should know exactly what happens to that information. At Fireflies, for example, we don’t use customer meeting content to train AI models. We require third-party vendors handling meeting content to follow zero-data-retention requirements. Companies should be able to understand where their data goes, who can access it and what controls they have over it.