ISO 27001:2022
Information security management.
Security and data
Trust Center
We say plainly what happens to your data: what stays on your device, what leaves it, where it goes, and what you can switch off.
Updated 24 September 2026
Certifications
Three ISO certifications,
held by EMIAC.
They certify EMIAC's management systems, not any single product.
ISO 9001:2015
Quality management.
ISO 10002:2018
Complaints handling.
Our principles
How we decide
where your data goes.
On the device, where it matters
Clario turns speech into text on your computer with our own model, Clario C1, and makes no network request to do it. AirNote uses C1 on the device too, on Apple silicon Macs.
Every data path written down
Clario connects to the network only on paths its team has named and written down, each with what it may carry. Its privacy policy explains how your data is handled, including the meeting audio it uploads by default to improve transcription.
Your keys, your providers
Clario's summaries are written by the AI provider you choose, with your own key or ChatGPT plan, and the key is stored on your computer. AirNote works differently: its polish step runs on AirNote's own server.
No quiet fallbacks
When something fails, it shows as a failure. Clario never quietly hands your transcript to another provider or a lesser model, and Crux marks a failed capture as failed, never as a zero.
Product by product
What stays, what leaves,
and where it goes.
Each product handles data differently, so each one is described on its own.
Clario
Available
Meeting notes, transcribed on your computer and written by the AI provider you choose.
What you control
- Turn off Help improve Clario in Settings. Future uploads stop and unsent ones are discarded; audio already uploaded is kept.
- Switch off usage data in the app.
- Choose the AI provider. Without one connected, no transcript is sent.
- Decide when a bot joins: by hand, or from your calendar.
- Take a shared link down, and it is deleted.
- Disconnect your calendar, and the server deletes its grant and cached events.
- On your computer
- Your library of recordings, transcripts and summaries, until you delete it, and your AI provider's key.
- Transcription
- Done on your computer by Clario C1, with no network request.
- Summaries
- When you ask for one, or ask a question, the transcript text and any text read off the screen go to the AI provider you chose. Never the audio, and never screen images.
- Training
- On by default. The audio of completed meetings is uploaded to storage Clario operates, to improve transcription. It carries no screen video, title, transcript or participant names, and it is kept with no deletion date.
- Meeting bot
- A Clario-controlled server records the call. The recording comes back to your computer to be transcribed there, with no third-party transcription service. Other Clario users in the meeting may have access to the same recording.
- Shared links
- Only when you publish one. The summary is encrypted and the key is in the link itself, so the server stores what it cannot read.
- Google Drive
- Only if you connect Drive and press to archive. The recording goes from your computer straight to your own Drive, not through Clario's server.
- Calendar
- Only if you connect it. Clario's server reads your primary calendar to show your schedule and, if you choose, send bots. It keeps event titles, times and meeting links, and Google's permission is stored encrypted.
- Usage data
- On by default: counts, durations, versions and error codes, which may be linked to your account. Never titles, transcripts, screen text, audio, images or file paths.
AirNote
In use at EMIAC
Dictation for the Mac. Speech is recognised on the device, and the text is polished on a server.
What you control
- Switch polish off in settings.
- For a company, admins manage workspaces and roles.
- Speech to text
- Recognised on your Mac by Clario C1.
- Polish
- To clean the text up, AirNote sends the transcript to its server. That text leaves your Mac.
- History
- Past dictations are stored on the Mac.
- For companies
- AirNote can run against an organisation server: sign-in by email or Lark, admin roles, and the company's vocabulary shared with every desktop. Usage is tracked per organisation.
Crux
In alpha
Tracks whether AI answers name your brand. It is a web app, so nothing is installed on your computer.
What you control
- The site and the competitors it tracks.
- The questions it asks, kept in your prompt library.
- What it asks
- Public questions of the kind your buyers ask, put to AI answer engines every day to see whether the answers name your brand.
- Setup
- You give it your site and your competitors, and a model drafts the questions.
- What it keeps
- Your brand, your competitors, the questions, and the answers with the sources they cite.
- When it fails
- A day an engine could not be asked is marked failed, never counted as a zero.
- Where it runs
- In your browser, as a web app. Nothing is installed on your computer.
For companies
Custom builds,
secured from the start.
When we build software for a company, these practices are built in.
Where it runs
On infrastructure your company controls.
- Deployed to your company's own cloud
- Infrastructure defined as code, not set up by hand
Who can do what
Access you can check: who did what, and when.
- Role-based access
- Audit trails
- Two-factor sign-in for admins
Security practices
What we do today
A checklist, kept to what is true now.
Across EMIAC
- Information security management certified to ISO 27001:2022.
- Custom builds with role-based access, audit trails and two-factor sign-in for admins.
In Clario
- The speech model's size and SHA-256 are checked before every use.
- AI provider keys are stored on your computer.
- Google refresh tokens are encrypted at rest on Clario's server.
- Shared summaries are encrypted, and the key stays in the link.
- The Google Drive permission reaches only the files Clario creates.
- Usage data carries no titles, transcripts, screen text, audio, images or file paths.
- Access to server data is restricted to operating and supporting the service.
Reporting an issue
Found a security problem?
Email inc@emiac.us with Security in the subject line.
-
Which product
Clario, AirNote, Crux or something we built, and the version.
-
What you found
What happens, and what you expected to happen instead.
-
How to reproduce it
The steps, so we can see it for ourselves.
Questions
Does my meeting audio ever leave my computer?
Yes, in three named ways. Clario uploads the audio of completed meetings to improve its transcription unless you turn Help improve Clario off. A meeting bot records on a Clario-controlled server. If you connect Google Drive, you can copy a recording to your own Drive. Summaries never carry audio.
What happens when I turn off Help improve Clario?
Future uploads stop, and audio not yet sent is discarded. Audio already uploaded is kept, with no deletion date.
Which AI provider sees my transcript?
Only the one you connect in Clario, with your own key or ChatGPT plan. It receives the transcript text, your question and any screen text, under its own privacy and retention terms. Deleting a summary in Clario does not delete what the provider has already processed.
Who else can see a meeting bot's recording?
Other people in the meeting who use Clario may have access to the same bot recording, and removing your access does not remove theirs. Use a bot only when you have permission to record, and tell people you are recording.
Does AirNote keep my voice on my Mac?
On Apple silicon Macs, speech is recognised on the device by Clario C1. The polish step then sends the text to AirNote's server, and you can switch polish off.
Are your products ISO certified?
The three ISO certifications are EMIAC's, for its management systems. They are not certifications of Clario, AirNote or Crux as products.
Where do I send a privacy request about Clario?
To the address in Clario's privacy policy.
Questions about your data?
Ask us, or read Clario's privacy policy in full.