RedHub AIRedHub AI
Tool Gate · How it works

How the gate works

How the AI Notetaker Compliance Tripwire works

This tool grades each AI meeting notetaker in an advisory firm on six controls, two of them fatal, before an exam. It scores 6 weighted controls into a 0–100 number — then a gate that can only make the verdict worse.

The 6 weighted controls

01Client consent & disclosure before capturewt 20
02Human review before notes enter the recordtripwire · at zerowt 20
03Retention & recordkeeping treatmentwt 16
04Vendor due diligence documentedwt 16
05Written supervisory procedures updatedwt 16
06Authorized & inventoried (not shadow AI)wt 12
DEFENSIBLE
score 75+
GAPS
score 50+
NOT DEFENSIBLE
below floor
Tripwire · worsen-only

Two of the six controls are fatal: client consent before the tool captures a meeting, and a human review before AI notes enter the client record. If either is absent, the tool is NOT DEFENSIBLE regardless of the score — no paperwork offsets a meeting captured without consent or a summary filed with no one checking it. Turn the missing control on and the wire releases.

80/100
NOT DEFENSIBLE

Why: This Copilot deployment is cleanly documented — consent captured, retention, vendor diligence, supervisory procedures, and inventory all in place — for a score of 80 that on points alone reads DEFENSIBLE. But its AI notes are filed with no human review, the second fatal control. The tripwire fires: a strong process can't rescue a missing fatal control, so the verdict is NOT DEFENSIBLE, not DEFENSIBLE.

Fix firstHuman review before notes enter the record — add a review step so a person checks each AI summary before it becomes the client record. It's the one fatal control this tool is missing, and clearing it moves the verdict off NOT DEFENSIBLE.

A high score didn’t save it. The score is context; the gate is the answer — and it names the one thing to fix first. Not legal advice. A deterministic readiness aid that grades your process from your own marks — it renders no legal ruling, makes no reportability or books-and-records determination, and scores no person. Regulatory specifics move; confirm consent law, recordkeeping, and supervisory duties with your compliance counsel before relying on any tool.