Where your meetings actually live
What happens to a Donna recording? Audio and screen are captured and compressed after the call. Audio chunks go to speech recognition and the transcript to analysis; the recording, transcript and report stay in your workspace. A read leaves the room only when you send it.
The data path, step by step
Capture
A real Chromium browser driven by Playwright joins the call as a visible participant. Audio and screen video of the call, compressed afterward.
Transcription
Audio is split into size-checked chunks and transcribed. The resulting transcript is written with real speaker names.
Analysis
Two passes: facts and commitments are extracted first, then the report is written through the chosen lens. The transcript is what the analysis sees; every claim still cites a timestamp.
Storage and delivery
Meetings stay in your Donna workspace. Sharing is a decision: a person you invite, a link you mint, or a file you export. Delivery is explicit — the dashboard, an optional email, a share link you mint, or an export you download.
Visibility is a design constraint, not a setting
Donna joins as a named participant a host admits. There is no covert mode, no silent recorder, and no way to attend a meeting nobody could see her in. She also leaves on her own: She leaves on her own: four end-of-call signals, a roster read that does not count other vendors’ notetakers as humans, and a silence backstop — which matters more than it sounds, because a notetaker that stays in an empty room is still recording it.
Sharing, deliberately narrow
A report leaves the room only when you send it. Share links carry an unguessable token, always serve the latest version of that lens, are revocable, and are excluded from search engines by both a page-level directive and an HTTP header. Exports are files you hold. Email delivery goes to named recipients you type. Nothing is published anywhere by default.
What we do not claim
No certification badges appear on this page, because certifications you have not completed are not a security posture. What is true and checkable: the dashboard is behind Google sign-in and noindexed, sharing is always an explicit act, and we do not train models on your meetings. If you need a compliance questionnaire filled in honestly, ask us and we will answer it line by line rather than pointing at a badge.
Questions, answered straight
Do you train models on our meetings?
No. Meeting content is processed to produce your transcript and your report, and that is the whole purpose.
Who inside our organisation can read a report?
Whoever you allow: meetings belong to their owner, org workspaces scope a team’s meetings to that org, and everything else is behind sign-in. Sharing outside is always an explicit act — a link, an email or an export.
What about the recording of a meeting somebody objects to?
Remove the bot for that call, and delete the meeting if one was made.
Is using Donna automatically compliant?
No. Consent, retention, access control and deletion are still a programme you have to run. Donna makes the remaining work tractable; it does not do the work.
Put Donna in your next meeting
Access is open — sign in with your Google account and she’s in your dashboard in minutes. Rolling out to a whole team, or want a hand with the server setup? We’re glad to help.