Turn on consent requests. Fathom has an opt-in setting, Auto Request Recording Consent, that emails guests 24 hours before an external, scheduled meeting — but only in some cases. Its help centre says that with the bot, you must be the host and there must be exactly one guest; in bot-free mode it covers scheduled external meetings, and on Zoom only if you have host rights. Same-day meetings get no email. If a guest declines, auto-record is switched off for that call — but if nobody replies, Fathom still records.
Check who gets the notes. Fathom's sharing guide says that if auto-share is turned on, notes go to everyone on the calendar invite, including people who didn't attend. Leave it off, or limit it, until you know what a recap contains.
Lock down links. On Free and individual plans, recording links default to "Anyone with the link can view". Restrict sensitive recordings one by one, and remember a share can't be unsent, only revoked.
Run a test call. Start a meeting on your own and confirm a recording and summary appear in Fathom afterwards.