Meeting privacy and audit trail
What leaves your machine when you use the Meeting desk (#/meeting), what stays, and how to prove it.
What leaves the machine
| Data | Leaves? | To whom |
|---|---|---|
| Audio chunks and imported files | Yes, when you record or import | Only the STT provider configured in Settings -> Voice |
| Transcript, notes, summary | Yes, when you run an action | Only the chat model you selected for that action |
| Summary text for read-aloud | Yes, when you press Listen | Only the configured TTS provider |
| Meeting list, titles, speakers, custom templates | No | Stays in the local browser profile |
| Calendar events and conference links | No | Parsed locally from the file you imported |
| Audit trail | No | Local until you export it yourself |
There is no Navin-side meeting archive, no automatic upload, and no background sync. If you never press Record, never import a file, and never run an action, nothing about the meeting is transmitted anywhere.
Where local data is stored
The desk uses the browser profile of the app, under these keys:
| Key | Contents |
|---|---|
navin.meeting.desk.v2 | Meetings: title, transcript, notes, summary, speakers, question log |
navin.meeting.templates.v1 | Custom summary templates |
navin.meeting.ics.v1 | Imported calendar events |
navin.meeting.autojoin.v1 | The auto-join preference |
navin.meeting.notified.v1 | Events already announced, so an alert is not repeated |
navin.meeting.audit.v1 | The audit trail |
Deleting a meeting from the list removes it from storage. Clearing the application data of the profile removes everything above at once.
Audit trail
Every meaningful action is appended to a local, append-only log: meeting created and deleted, recording started and stopped, audio imported and transcribed, transcript appended with its size, template selected or created, action sent to the agent, question asked, export produced, calendar imported, event linked or joined, auto-join toggled, summary read aloud.
Each entry carries a timestamp, the meeting identifier, the action, and a short detail. The Notes tab shows the log for the active meeting and downloads it as Markdown, which is the artefact to attach to a compliance review.
The trail is designed to answer the question an auditor actually asks: what was captured, when, with which processor, and who asked for the export. It is not a security boundary, since it lives in the same profile as the data it describes.
Practices for regulated environments
- Choose the STT and chat providers deliberately. In the Meeting desk, the processor is whoever you configured, so your data processing record should name them.
- Record only what you need. A meeting with notes and no audio still produces minutes, since actions accept notes alone.
- Announce recording to participants. Navin displays a timer while capturing but does not announce anything in the call itself.
- Export and archive at the end, then delete the meeting from the desk. The browser profile is a workspace, not an archive.
- Keep the audit trail with the export when the meeting has a legal or contractual weight.