Security & confidentiality
Recapro’s security, with no blind spots
AI inference (transcription and summary) is 100% self-hosted in France, and no third party sees the content of your meetings. This page details our architecture, our French hosting providers, our sovereign processing chain and our compliance posture.
The essentials, in one answer
Recapro produces the transcription and summary of your meetings on its own servers, in France. No third-party language or transcription model is involved, and the content of your meetings is never shown in clear text to any third party. On the Cloud offering, no meeting data (audio, transcript, minutes) is hosted by an entity under US law.
- Inference 100% self-hosted in France: transcription, summarisation and speaker identification run on servers we operate ourselves.
- No third-party language model or transcription engine: the content of your meetings is never sent to an external AI service such as OpenAI, Anthropic or Mistral.
- French sovereign Cloud: Scaleway (Paris) for the database, authentication, file storage and APIs, France-Nuage (Vendée) for hosting and fleet supervision, STT and LLM inference on our own servers in France. No meeting data is hosted by an entity under US law.
- Encryption at rest and in transit: service data is encrypted both in storage and during transport.
- Compliance: Recapro is HDS-ready, with no HDS or ISO 27001 certification claimed to date.
- On-premise deployment available: the whole chain runs on a machine installed at your site, with an air-gapped mode possible.
Our commitments
Seven commitments, and the evidence behind them
Every badge on the home page points here. You will find what we do, who does it, and where. None of these seven lines is a certification: most of them have none to obtain, and we claim none.
Built for the GDPR
Recapro acts as a processor under article 28 of the GDPR: we process your meeting data on behalf of your organisation and on its instructions.
- A data processing agreement (DPA) is available on request at [email protected].
- Our list of subprocessors and our retention periods are published in the privacy policy, not held back for tenders.
- Data subject rights (access, rectification, erasure, portability, objection) are exercised with your organisation, which is the controller, and we carry them out on its behalf.
There is no such thing as a GDPR certification, so we display none. What we publish are the documents and the retention periods that let you check.
Hosted in France and the EU
Only Cloudflare, Stripe, Sentry, Google, Apple and Expo are American; everything else sits in France or in the European Union.
- Scaleway (Paris, France): database, authentication, file storage and APIs.
- France-Nuage (Vendee, France): hosting and fleet supervision.
- STT and LLM inference (France): transcription and summarisation on our own servers. That is the only moment your meeting content is read in the clear, and it happens on our hardware.
- Brevo (France): service email delivery.
- Cloudflare (United States): delivery, caching and traffic filtering in transit.
- Stripe (United States): payments. Sentry (United States): technical error reports. Google, Apple and Expo (United States): push notifications and mobile app distribution.
No American vendor takes part in transcription or summarisation.
Zero retention by our AI engines
Transcription and summarisation run on our own servers, in France. No third-party AI API is called.
- The models run on our machines, in France. No request goes out to an external AI service.
- The engine receives your content, produces its output and keeps none of it: no request cache, no model-side history.
- Your minutes, on the other hand, are kept: that is what lets you find them again on your phone and on your computer. The retention period is configurable per organisation and documented in the privacy policy.
The retention this badge is about is the AI engines’ retention. It says nothing about your library of minutes, which stays available for as long as you decide.
No training on your data
We neither train nor fine-tune any model on the content of your meetings.
- The models we run are taken as they are, unmodified. Your meetings are not used to change them.
- No training dataset is built from our customers’ recordings, transcripts or minutes.
- Because no third-party AI API is involved, the question "is this vendor training on my data?" does not arise: there is no vendor.
AES-256 at rest, TLS in transit
Your data is encrypted while it travels and while it sits.
- In transit: TLS on every link between your devices and our servers.
- At rest: service data and its backups are encrypted on the Scaleway infrastructure hosting them, in Paris.
- Calendar access tokens additionally get application-side AES-256-GCM encryption, applied before they are written to the database. They are never sent to your devices.
You can leave with your data
Everything you put into Recapro Cloud, you can take back out. We hold nothing hostage.
- On request at [email protected], we hand you a full export of your data: meetings, transcripts and minutes.
- The export comes with no conditions. You do not have to justify leaving, or negotiate anything to get it.
- The GDPR separately gives you a right to portability; this commitment goes further, covering all your content, not only your personal data.
AI Act: AI transparency (article 50)
The minutes Recapro produces are generated by an artificial intelligence. Article 50 of the European AI regulation asks that this be said plainly, and it is said.
- A set of minutes is a draft to be reviewed, not a certified record. Transcription and summarisation get things wrong sometimes, and whoever circulates the document answers for it.
- Recapro does not analyse emotions and produces no scoring of individuals. The drafting models are explicitly instructed never to attribute a feeling or an intention to anyone.
- The original transcript stays readable next to the minutes, so you can check what was said before circulating anything.
Would you rather nothing left your building? The On-Premise offer installs the whole chain, inference included, on a machine you control.
Inference fully self-hosted, in France
The moment a model reads your data in clear text is the sensitive point of any AI transcription. At Recapro, that moment takes place on our own hardware, with no intermediary.
The transcription
Speech-to-text runs on our infrastructure. No third-party transcription service is called.
The summary
Minutes are generated on our infrastructure. No call to OpenAI, Anthropic, Mistral or any other AI vendor.
Speaker identification
Working out who spoke happens in the same place, without the audio leaving it.
Hardware: a dedicated AI server
The entire inference runs on a dedicated AI server that we operate in France.
AI inference is 100% self-hosted in France, and no third party sees the content of your meetings.
Hosting and datacenters
Service data is hosted in France and in the European Union. Here is where, and with whom.
Vendée (France): France-Nuage
Hosting infrastructure and fleet observability, operated in Vendée by France-Nuage.
Paris (France): Scaleway
The database, authentication, file storage and service APIs are hosted by Scaleway, in Paris.
Scaleway publicly claims the ISO/IEC 27001 and HDS certifications for the scope of its own infrastructure. These certifications cover the hosting provider, not the Recapro application running on it.
Source: Scaleway, “Security and resilience” (accessed 28 July 2026).
With the on-premise option, everything stays on your machine
In an on-premise deployment, Recapro is installed on a machine you control. The whole application chain and the inference run on it.
One machine, at your site
Recapro installs on a server you control. The whole service runs there, transcription and summarisation included.
Nothing exposed to the internet
Recapro is only reachable from your own network. No inbound access is opened to the outside.
No meeting data leaves
Your recordings, transcripts and minutes stay on the machine. None of their content comes back to us.
What does leave, and that is all
Outside air-gap, the machine only reports that it is alive and the state of its license, plus hardware metrics: CPU, memory, disk, uptime.
Air-gapped mode
Recapro can run entirely offline, with no outbound connection at all.
You stay in control
Activation is driven by your license, and the installation stays auditable by your own teams.
To compare deployment models, see the sovereignty & AI inference explainer.
Frequently asked questions
01
Does Recapro send the content of my meetings to a third-party AI service?
02
Is Recapro HDS-certified?
03
Is Recapro ISO 27001-certified or SecNumCloud-qualified?
04
Where is the content of my meetings processed?
05
Where is my data hosted?
06
In on-premise mode, what data leaves the machine?
An architecture you can audit
French sovereign cloud or air-gapped on-premise: in both cases, the inference of your meetings stays under your control.
What security covers elsewhere
The security of a meeting summary rests as much on the deployment architecture as on contractual commitments.
- CLOUD Act and meeting minutes What the US law allows, why residence and jurisdiction differ, and where Recapro Cloud and On-Premise stand, layer by layer. Read the CLOUD Act page
- Sovereignty & certifications SecNumCloud, HDS, SEAL levels and the CADA proposal explained with dated statuses, then seven questions to ask any provider. Read the frameworks guide
- Air-gapped deployment The mode where the machine has no outbound network access at all. Exposure drops to zero, operational workload goes up. See air-gapped deployment
- On-premise deployment The server stays with you or with your hosting provider. Sizing, administration, updates, what it really involves. See on-premise deployment
- AI inference sovereignty The language model is the link vendors document least. Here is where ours runs. Read the sovereignty page
- Summaries in healthcare Medical confidentiality, health-data hosting, GDPR article 9. The sector that pushes these questions furthest. See the healthcare use case
- Privacy policy The processing activities, legal bases and retention periods, in full legal detail. Read the privacy policy
- Minutes for accounting firms Professional secrecy for chartered accountants and the financial data of the firm’s clients. See the accounting use case