How to Block AI Notetakers From Your Meetings (Zoom, Teams, Meet)

You are ten minutes into a sensitive call when a name nobody recognizes appears in the participant list: Fireflies.ai Notetaker. Nobody on your side invited it. The conversation slows, and someone asks the question you hoped to avoid: who is this, and where is the recording going?

You can stop most of these bots, but not with one switch. Three layers work together: stop the invitation at its source, make the platform check who may join, and put every unknown joiner in a lobby where a person decides. A fourth step, removing a bot that got in, is the backstop.

One limit comes first. Blocking bots does not stop a person from recording with a desktop app on their own computer. Otter's desktop app and Chrome extension work without a bot in the meeting, and Fireflies, Fathom and tl;dv also offer or advertise bot-free modes. No meeting platform setting can see those. For them you need a recording policy, not a block list.

Then give people a bot-free alternative. If you only block, some people will move to a recorder you cannot see. An approved bot-free tool keeps the notes without a tile in front of clients. CatchMeet is one: it runs on the user's computer, adds nothing to the participant list, and has a free plan.

Sections below give the exact settings per platform, the admin checklist, and the reasons blocks sometimes fail.

A bot reaches your meeting by one of a few routes, and each route is stopped at a different checkpoint.

These bots look like ordinary participants, and that is on purpose. Fireflies says its bot "is always visible in the participant list" under the name Fireflies.ai Notetaker, and Read advertises that "everyone in the meeting knows Read is there." The risk is not secrecy. It is that nobody decided to admit it.

Removing a bot once does not solve the problem. A bot that joins from calendar auto-join returns the next time the event recurs, because the invitation, not the room, is what brings it. That is why the blocks in this guide start before the meeting.

Block at the earliest checkpoint you control. The later ones catch what slips through. Sources are listed at the end.

Host settings work meeting by meeting and depend on someone remembering them. Use them as the first line of defense, and put the durable controls in the admin section. Where a vendor's page did not give a setting's exact path, the table says so instead of guessing.

Zoom's waiting room article lists the controls that matter: require sign-in to join, restrict by email domain, use the waiting room, and manage which Marketplace apps may join. For a single meeting:

Teams labels external bots it detects and holds them in the lobby "regardless of the meeting's lobby configuration," and an organizer must admit them explicitly ( Microsoft Learn ). As the organizer:

Meet gives hosts access types rather than a bot filter ( Google Workspace help ):

Webex's article on preventing AI bots covers admin-level domain rules only (see the admin section). For hosts, Webex's lobby guide describes the practical steps. When someone is waiting, a notification appears in the meeting controls, or in the Participants panel if it is open. The list is sorted into Internal, External and Unverified, so you can act on a whole group at once. Tick the people (or choose Select all) and click Let in or Remove. To send someone who is already in back to the lobby, right-click the name and select Move to Lobby. That guide does not describe locking a meeting or expelling someone after they joined, and the lobby feature is not available in Webex Meetings for Linux.

In GoTo, an organizer can lock the meeting. People who try to join while it is locked wait in a waiting room, and everyone waiting connects automatically when you unlock. To remove someone who is already in, the organizer right-clicks the attendee's name in the People pane, selects Dismiss and confirms with Yes; the attendee leaves and is told they were excused. That page is for GoToMeeting Classic, so check the menu in your current app. GoTo's pages do not mention bots: lock the meeting once everyone expected has arrived, and dismiss anything unfamiliar.

Host settings fail the day a host forgets. Admin controls take the decision away from the host, which is why they belong in every plan. What each platform offers differs a lot.

Zoom. Zoom lets admins allow or block specific Meeting SDK apps published on its Marketplace, and says unpublished SDK apps cannot join meetings outside the developer's account. Its bot blocking dashboard in the Meetings app shows which apps are attempting to join, joining or being blocked. Waiting-room defaults can be set for the whole account under Admin Center > Settings > Meeting > Security, or per group ( Zoom ).

Microsoft Teams. Bot handling is a meeting-policy setting under Teams admin center > Meeting policies > Meeting Join and Lobby > Manage external bots and their access to meetings. In PowerShell it is ExternalBotAccessMode. It can be set for the whole tenant or for targeted groups ( Microsoft Learn ).

Microsoft Message Center item MC1459141 (roadmap ID 566201) describes a further policy that blocks identified external bots automatically. The listing gives its default state as Off, with worldwide general availability starting in early October 2026 and finishing by late October. The listing names no PowerShell value, and Microsoft Learn's reference still lists only the two values above, so confirm the option in your tenant's Teams admin center before scripting it. Learn's text names Set-CsTeamsMeetingPolicy, but its examples use Set-CsTeamsEventsPolicy, so check the cmdlet too. Microsoft says some bots will go undetected and some people will be flagged.

Google Workspace. Admins set whether Host management is on by default ( Google ), and can gate Gemini's "Take notes for me" by organizational unit or group. Google's documentation lists no admin setting that filters third-party notetaker bots.

Webex. In Control Hub, go to Services > Meeting > Settings and, under Meetings, choose an option next to Internal. "Block external users with selected email domains" is the option that blocks bots by domain. Enable the Site Admin feature "Request attendee email address for all sites" so the block works as intended. The article is dated 14 April 2026, applies to the Webex Suite meeting platform, and says it replaces the Site Admin "Blocked email list" ( Webex ). It does not say what happens to bots that join with no email address.

Webex lobby and auto-lock. Site-wide lobby behavior sits in Control Hub under Services > Meeting > Sites: choose the site, open its settings, then Security under Common Settings. When a meeting is unlocked offers three choices for guests: join directly, wait in the lobby until the host admits them, or cannot join. Automatically lock meeting locks it 0, 5, 10, 15 or 20 minutes after the start (default 10), and applies only where hosts have not set their own preference. When a meeting is locked decides whether late arrivals wait in the lobby or cannot join at all.

If a bot keeps returning, one of four things is usually happening.

The invitation never stopped. A bot that follows calendar events keeps trying every time an event recurs. Removing it from the call fixes one meeting. The lasting fix is the owner's auto-join setting, or an admin limit on who can connect calendars.

The block does not match how the bot joins. A domain rule only sees the email domain of the joiner. It does nothing against a bot that joins from an account on a domain you allow, or one that is bot-free and never joins at all. Webex's article does not say how its domain block treats bots that join without an email address.

Detection has gaps. Microsoft says some external bots will go undetected and some people will be flagged as bots. Zoom says a real user flagged by its Web App protection can still sign in to join.

The tool is not a bot. Fireflies has a no-bot "Take Notes" mode in its desktop app, Fathom says you can capture notes "bot or no bot," tl;dv says "no bot required," and Otter's desktop app records without one. CatchMeet works the same way: it runs on the user's computer and adds no tile. No bot filter touches these.

Use this as a starting list for allow-and-block decisions, not as a finished block list. The address a bot shows can differ from its vendor's website domain, so confirm what appears in your own participant list before you block anything.

A starter block list. Only fireflies.ai has a bot address confirmed on the vendor's own page. The other four are the vendors' website domains, and a bot may join from a different address, so treat the list as a first pass and check it against your own participant lists.

# Starter list of notetaker domains # Bot address confirmed on the vendor's own page fireflies.ai # invite address fred@fireflies.ai # Vendor website domains; bot address not confirmed otter.ai read.ai fathom.ai tldv.io Enter fullscreen mode Exit fullscreen mode Webex accepts a list like this under Block external users with selected email domains. Zoom's documented domain control works the other way, as an allow list that holds everyone else in the waiting room, and the Teams pages cited here have no blocked-domain field, so in both use the list as a lobby watchlist and deny a joiner whose name or address matches. A domain block cannot see a bot-free app on someone's laptop, and it also blocks real employees of those vendors.

The strictest setting is rarely the right one. Blocking every external participant stops bots and also stops your clients, auditors and candidates. Platforms warn about this themselves: Teams says detection can flag real people, and Zoom says a flagged user can still sign in. Pick the setting that matches the risk of the meeting.

Start from the lobby default and move up or down only when the risk changes.

Each row maps to a control above: Webex's four external-user options, Zoom's sign-in and domain controls, the Teams bot policy and lobby, and Meet's access types.

Blocking a bot and admitting a bot both leave the legal question open: did every person on the call agree to be recorded? This section is a summary of public legal guides, not legal advice. Laws change, and the guides cited date from 2019 to 2020, so confirm the current statute with a lawyer before you rely on it.

Regulated industries. Health, legal and financial calls carry extra duties. For health information, HHS says a cloud provider that stores or processes electronic protected health information is a business associate and the covered entity must sign a HIPAA-compliant business associate agreement, even if the provider holds only encrypted data. Before a notetaker touches privileged or regulated calls, ask your counsel or compliance owner whether it is allowed at all.

A routine that works anywhere. Say at the start that an AI assistant is running. Ask for objections. Note the answer. If anyone objects, stop recording. The same routine applies to a bot you admit and to a bot-free app on your own laptop.

People invite bots because they want notes. Block the bots and offer nothing else, and some will switch to a desktop app that no platform setting can see. A sanctioned bot-free option keeps the notes and keeps the decision with you.

Which one fits. If you want a bot-free notetaker with a free plan that also helps while the call is running, CatchMeet is the closest fit of the four options above. Its free plan includes live transcription, summaries, chat, mention alerts, three tracked topics, and answers and fact-checks from your own documents. Compared with Otter, it adds help during the call and runs with no bot by default. If your priority is an automatic, searchable archive with CRM sync for internal meetings, Otter is the stronger choice.

What happens to the recording a bot already made before I removed it? The account that owns the bot keeps what it captured. Fireflies says removing its bot stops transcription but the owner still receives notes for the part already recorded. Ask the owner to delete it, and ask the vendor if the owner cannot.

Are Zoom, Teams and Meet's own AI notes the same as a third-party bot? No. They run inside the platform, a host or co-host starts them, and they show an indicator while active. Admins can disable or gate them: Zoom AI Companion in third-party meetings, Gemini notes in Meet by organizational unit or group.

What should I say when a client brings their own notetaker? Ask before you start: "Before we begin, who is recording, and where does it go?" Then agree on one record, or ask for a copy of theirs. If your policy does not allow it, say so and offer to take notes by hand or share yours afterwards.

Can I use a bot-free app if a client's policy bans bots? Read the policy's wording first. Many bans name "bots" or "third-party notetakers" and would still apply to a tool that records audio. Ask for written permission, and do not assume that being invisible makes it allowed.

How often should I review my block lists and settings? Every quarter, and after any platform announcement. Vendors keep changing this area: Teams added bot detection in 2026, Webex published its domain-block article in April 2026, and Fathom's address now redirects to fathom.ai.