Thanks Michael - I'm actually on the university's AI committee, and the guidance from legal and compliance is as long as we have a contract with appropriate breach language in place with the chosen tool, we are good to go. We would potentially use CoPilot since we have an enterprise wide contract, and it has all of the necessary language, and it keeps our data separate in our own instance of Dataverse.
Just to clarify though, my thought wasn't that the recording would be loaded into any central database, merely that the DO would load it into CoPilot to generate the summary. And sure, using the transcribe function in Word (which I didn't know existed until I asked Copilot if it would record face to face sessions!) and then putting the DO's own summary into CoPilot is always an option.
Thanks again, and would love more feedback from anyone else doing this!