Does using cloud dictation waive attorney-client privilege?

No court we found has held that sending dictation audio to a vendor waives privilege. The test is confidentiality. Privilege protects confidential communications made to get legal advice ¹, so the question is whether the vendor's role and terms keep that content confidential. A vendor that stores audio, trains its models on it or lets people listen to it gives an opposing party more to argue about. A vendor that processes audio under a confidentiality commitment and keeps nothing gives it much less.

Privilege depends on confidentiality, not on where the audio is processed

Confidentiality is the condition that keeps privilege in place. Cornell says that if a third party is present during a privileged communication, confidentiality may be compromised unless that third party is essential to the attorney-client relationship ². A cloud dictation service is not in the room, so the comparison is imperfect. The test in spirit is the same: is the third party there to serve the lawyer's advice, and is it bound to keep the content private?

The Texas ethics opinion applies that test to outside providers. The opinion applies the same test to generative AI tools as to other service providers: "the lawyer can only do so if he or she is reasonably confident that the confidential character of the information will be respected and protected by the service provider" ³. The test looks at the vendor's conduct and terms, not at whether the audio left your device.

In United States v. Kovel, the Second Circuit said an accountant's presence does not destroy privilege where it is necessary, or at least highly useful, to the consultation ⁴. Kovel concerned a person, not software, so applying it to a dictation vendor is an analogy. It shows that courts ask what role the third party plays.

Human access and long storage create the real exposure

The biggest practical risk is not the transfer. It is who can hear the recording and how long it survives. In 2019 The Guardian reported that Apple contractors regularly heard confidential medical information and other private recordings while checking Siri quality ⁵. Vendor defaults differ. Google says that by default, Cloud Speech-to-Text does not log customer audio data or transcripts ⁶.

Accidental disclosure is treated more leniently

A mistake does not always waive privilege. Under Federal Rule of Evidence 502, an inadvertent disclosure is not a waiver when the holder took reasonable steps to prevent it and promptly took reasonable steps to fix it ⁷. The rule governs federal proceedings, and state courts have their own rules. For a firm, the lesson is practical: set up safeguards in advance and fix problems quickly. A firm that can show both is in a better position than one that cannot.

It depends: four cases

• On-device recognition, nothing sent to a vendor. There is no third party handling the audio, so the vendor question largely falls away.
• Cloud recognition, no retention, no training, confidentiality in the contract. This is defensible if you can document the terms and the settings.
• Cloud recognition that stores audio or trains on it. The risk rises. The ABA says informed consent is required before client information goes into self-learning tools whose outputs could disclose it ⁸. The ABA opinion is guidance, and your state's rules decide what applies to you.
• Cloud recognition where human reviewers can listen. This carries the highest risk, because a reviewer is a person outside the firm with access to the content.

What to do before client audio goes to a vendor

1. Find out where recognition runs. Ask whether the audio is processed on the device, in the vendor's memory or on its servers.
2. Check retention and training. Confirm how long audio or transcripts are kept, whether you can delete them, and whether the vendor uses them to train its products.
3. Ask who can listen. Get a written answer on human review and the confidentiality duties that bind reviewers.
4. Keep a record. Save the vendor's answers and the settings you chose with the matter file, so you can show the choice was deliberate.

For the five questions to put to any vendor, see our guide on dictation for lawyers, privilege and confidentiality. If you want recognition that runs on your own computer, Yap, which we make, is an on-device option. Check its current settings for your platform. For the definitions behind these terms, see attorney-client privilege, cloud dictation and on-device speech recognition. Related questions cover what ABA Formal Opinion 512 says about AI tools, whether AI chatbot conversations are privileged and whether lawyers can use AI notetakers on client calls.

Ask your state bar or your firm's ethics counsel before you rely on this reading for a specific matter.