Circleback is an AI-powered meeting notes service, the kind of tool where trust is everything because it processes your conversations. After analyzing the site, it checks most of the boxes you'd expect from a legitimate SaaS: a clear about page, contact info, and a history dating back over three years. The Y Combinator and TechCrunch mentions add real-world credibility, and the security setup — modern encryption, strict email authentication, and no blacklists — shows they're paying attention to user data. The main catches are the hidden WHOIS registration (common for startups but not transparent) and the high number of external scripts that track users. For a product asking you to upload meeting recordings, I'd want to review their privacy policy carefully, especially around data retention and third-party sharing. Overall, Circleback appears to be a real, functional product, not a scam. If you're wondering whether it's safe for business use, the answer is likely yes — just stay informed about how your data is handled.
In plain English
Circleback is a legitimate AI meeting notes tool backed by Y Combinator. Its strong security and transparency outweigh minor concerns like hidden domain registration and a high number of external scripts. I'd feel comfortable using it, but check their privacy policy for data handling.
Where the score comes from
Solid security setup: modern encryption, strong headers, and no Safe Browsing flags. The site takes user data protection seriously, which is essential for a SaaS handling meeting recordings.
The domain is 3.5 years old and the business is open about its team and Y Combinator backing. However, the domain registration is hidden behind a privacy service — common but not ideal for a commercial SaaS.
No blacklists, positive web history, and mentions of Y Combinator and TechCrunch add credibility. The lack of a Trustpilot profile is neutral for a smaller company.
Strong transparency: detailed about page, contact info, privacy and terms, plus social media presence. The site clearly states its funding and team.
Privacy policy and terms of service are present, but GDPR cookie consent isn't obvious. For a SaaS, full compliance expectations would include clearer EU-facing disclosures.
Technically well-built: fast load, Cloudflare DNS, Vercel CDN, and proper email authentication. The only concern is a high number of external scripts, which warrants a privacy review.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →