The problem
You can't record the meetings that matter.
Every notetaker puts the transcript on a server the vendor can read, and takes a voiceprint from everyone in the room. So on a privileged call the recorder stays off and the notes are lost — lawyers and clinicians feel it first. And when you do record, the liability is yours: whoever brought the tool is the one who gets named. POSTER
The transcript
Sits on a server the vendor can read — a privileged conversation a third party holds in the clear. POSTER
The voiceprint
Captured from everyone present, without consent. In April 2026 both Otter and Fireflies were sued by people who were never users, only in the room. POSTER
The exposure
The largest settlement under Illinois' biometric law is $650M, over $2B across the statute — as stated on the team's poster. POSTER
What they built
"Consent over your voice is a layer, like HTTPS — not a feature of one product." POSTER
Consent-gated naming
A name attaches to a voice only when that person agrees, enforced per edge: membership × id_visibility × subject_consent. Who may share you and who may name you are held separately, by different people.
shipped · per-edge, at namingPOSTEROperator-blind
Audio and transcript are sealed at rest under a key generated inside the Intel TDX chip that never leaves it — the company running Conclave can't read them. The key is bound into a hardware attestation quote.
shipped · attested enclavePOSTERDelete with proof
Claim your voice, pause it, or erase it. Deletion returns an Ed25519 receipt anyone can verify offline, no account needed.
shipped · signed, verifiable offlinePOSTERVerifiable redaction
Strip regulated data (payment, health, personal) inside the enclave. The redacted copy is re-signed, with an offline-checkable receipt showing exactly what was removed.
shipped per posterPOSTERConfirm shippedHow it works
Everything sensitive happens inside a sealed enclave; the read path stays on your machine.
Microphone
"No biometric ever leaves the enclave." Identity re-embeds every span inside the boundary, so the consent layer holds whichever transcription engine is configured. POSTER
Built with: Intel TDX · Phala dstack · Python · FastAPI · Redis Streams · SQLite FTS5 + vectors · diart · pyannote · CAM++ (WeSpeaker, Apache-2.0) · WavLM-Base+ · Ed25519 · ONNX Runtime · Next.js. ASR is a managed engine today (labels only, never a voiceprint); the LLM runs TEE-served, once at ingest, never on the read path. POSTER
The numbers
Their diarization model, on the public benchmarks every system is tested on. Lower is better (speaker-error rate).
| Benchmark | Conclave (clean licence) | Free self-hostable (best) | Paid cloud |
|---|---|---|---|
| AMI | 17.68 | 19.9 | 15.6 |
| AISHELL-4 | 11.26 | 11.7 | 11.4 |
| AliMeeting | 19.73 | 20.3 | 15.2 |
The team's claim: trained on a clean, commercially usable licence, it beats every free self-hostable diarizer on all three benchmarks, and on AISHELL-4 it beats the paid cloud too. One model, three corpora, two languages, no per-dataset tuning. The engine is swappable by a single flag, with a managed provider as fallback. POSTER
Build figures from the team's July 2026 pitch page; no public repos were reachable to corroborate them on 2026-07-22. PITCH
Who's building it
A two-person team across India and New York. REGISTRY
Prakhar Ojha
Builds the enclave side: sealed storage, attestation, receipts.
Parth Thapliyal
Builds the model side: diarization, identity embedding, benchmarks.
Why now
"The rules already exist. An un-consented voiceprint, or a privileged call a vendor can read, is a liability today, not a hypothetical." POSTER
United States
Illinois' BIPA makes an un-consented voiceprint a lawsuit; HIPAA covers any health conversation; two-party consent laws cover the recording itself. POSTER
Europe
GDPR treats a voiceprint as sensitive biometric data; the EU AI Act limits biometric identification. Both reach any team with a member in the room. POSTER
India
The DPDP Act requires provable consent to collect a voice, with the burden of proof on the company. Since July 2024, audio is court-admissible only with a signed, hash-certified record — what this architecture produces. POSTER
The team sizes the market at $3.5B today, on track for $21B by 2033, with lawyers, clinicians, and advisors already paying $14–30 a seat. Their own caveat, kept intact: "We claim no compliance badge." POSTER
In their own words
How the team tells it — July 2026.
"A government official, unprompted, told us they record every important meeting but cannot put AI output on the record, and named verifiable proof that no one can access it as the unlock. That is exactly what we build." From the team's cohort poster — in discovery, initial interviews POSTER
"I don't feel very great about being recorded. Whenever I'm getting recorded, I start thinking about what I'm speaking."
"Nothing is automated. It's gated by the host. Only once the host tags you will you actually get tagged."
"You can actually delete your voice fingerprints, and we create a receipt you can verify — so in the future there's no loop of people tagging you again."
On the diarization model: "In-person diarization, instead of just reading books — that is a whole particular research direction. We're figuring out how to use multiple phones if the meeting room is big."
Verify it yourself
The trust claims are designed to be checked, not believed.
Deletion receipts
Ed25519 receipts designed to verify offline, no account needed. The public-key endpoint GET /v1/deletion-receipt-key is documented, but wasn't serving at the app host when checked 2026-07-22. POSTER WEB 404 at check
Attestation
The sealing key is bound into a hardware attestation quote — cryptographic evidence it was born in a sealed enclave, not on their servers. POSTER
Benchmarks
Measured on production-matched enclaves with strict scoring; raw logs on request. POSTER
Try it & links
Running today — "it is running on the table; ask us for the sixty-second demo." POSTER
| Surface | Where | Source |
|---|---|---|
| App | app.conclavehq.org — "Private transcription that can't read your meetings." Start for free. | POSTER WEB Live · 07-22 |
| Docs | docs.conclavehq.org — three services: Conclave, Capture, VFTE | WEB Live · 07-22 |
| Demo video | youtu.be/G9zEQloKdqI — "Two minute pitch for IC3 Accelerator" | WEB Accessible · 07-22 |
| GitHub | No public repos reachable — the app's footer links github.com/conclavehq, which doesn't resolve | WEB 404 at check |
| Contact | hello@conclavehq.org | POSTER |
Provenance ledger
Every load-bearing claim and where it comes from; decisions live in §11.
| Claim | Comes from | Tier | Status |
|---|---|---|---|
| One-liner, problem framing, shipped features | Cohort poster, July 2026 | POSTER | Team's own artifact |
| Founders and roles | Poster byline; cohort registry | POSTER REGISTRY | Corroborated |
| Architecture & stack (§03) | Poster architecture panel | POSTER | Team's own artifact |
| Benchmark table (§04) | Poster; team's own measurements | POSTER | Pending approval |
| Legal & market figures (§01, §06) | Poster, with its listed sources; not re-verified here | POSTER | Pending approval |
| Government-official quote (§07) | Poster "in discovery" panel | POSTER | Pending approval |
| Links (app, docs, video) | Poster + registry; fetched live 2026-07-22 | POSTER WEB | Verified live |
| Deletion-receipt key endpoint | Poster + docs say GET /v1/deletion-receipt-key; returned 404 on 2026-07-22 | POSTER WEB | Conflict — confirm |
| Public code | github.com/conclavehq unreachable despite the app footer linking it | WEB | Conflict — confirm |
| Pitch excerpts (§07) | Team pitch, July 2026; lightly punctuated | PITCH | Pending approval |
| Redaction "shipped" status | Poster says shipped; the team's July sessions describe it as planned | POSTER PITCH | Conflict — confirm |
| Operator-blind claim | Poster + repo; attestation is team-attested, not third-party audited | POSTER WEB | Pending approval |
| Build figures (§04) | Team pitch page; GitHub-attested | PITCH WEB | Corroborated |
Founder review
Three things before this page goes public.