Audio and video can contain identity, commercial, health, or employment information. A transcription tool should be assessed from upload through deletion—not only by model accuracy.
Uploads and storage
Confirm that audio and video are protected from unwanted access, download links can expire, and source files have a clear deletion point.
- Avoid files or links that anyone can access.
- Verify that each user can access only their own files and transcripts.
- Ensure unfinished or failed uploads are removed on schedule.
AI services, logs, and third parties
Understand which AI and cloud services process content, where they operate, how long they keep it, and whether they use it for training. Error logs should not contain transcript text or sign-in credentials.
- Error reports should remove sensitive link data and complete request content.
- Payment, email, and AI-service credentials should be strongly protected.
- Give integrations only the minimum data required for their task.
Sharing, storage, and deletion
Share links should expire, be revocable, and limit the content they expose. Account closure should remove content and files held by the service and explain what third parties may retain.
- Do not leave reusable share credentials in public channels or logs.
- Explain how long transcripts, share history, and billing records are kept.
- Lawful third-party records do not disappear automatically when an app account is closed.