Reviewed and updated: 21 July 2026.
An access audit should answer two questions: who can reach recording data now, and who has been able to reach it in the past? Checking only the device misses app accounts, exports, shared links and copied summaries.
Build the access map
List every location in the workflow:
- Recorder storage.
- Paired phone and companion app.
- AI processing account.
- Shared workspace.
- Email and messaging copies.
- Downloaded audio and transcripts.
- CRM, case, project or knowledge systems.
- Backups and archived folders.
Review people and permissions
For each location, compare current access with business need. Look for former employees, broad team permissions, personal accounts, public links and administrators who do not require content access.
| Audit test | Evidence |
|---|---|
| Named owner | Account or system owner recorded |
| Least access | Permissions match current role |
| Shared-link control | Recipient, expiry and download settings known |
| Leaver removal | Disabled users absent from all layers |
| Review trace | Access changes and exceptions documented |
Sample actual records
Do not rely only on configuration screens. Select recent recordings and trace who captured, reviewed, exported and shared them. Check whether the final business record has narrower access than the raw source.
Inspect hidden copies
Search common download folders, email attachments, personal notes and collaboration tools. A secure central account provides little protection when unrestricted exports remain elsewhere.
How NERALVO Halo fits the audit
NERALVO Halo combines local capture with DOWAY processing and export. Audit each layer separately, including the paired phone.
Close every finding
Assign an owner, deadline and verification method. Remove unnecessary access, expire links, recover unmanaged copies and update the role model. Repeat the audit after staff changes, supplier changes or incidents.
An access list is useful only when it reflects real data movement, not the organisation’s intended diagram.
Ready to capture meetings properly?
View the NERALVO Halo AI voice recorder with 64GB local storage, meeting capture, compatible phone-call recording workflows and one year of DOWAY Max included.
View NERALVO Halo