Can you edit client audio if the NDA bans cloud tools?

What "no third-party services" usually means in practice

A confidentiality clause typically stops you disclosing the material to anybody outside the agreement. Uploading a recording to a cleanup service is a disclosure to that service, whatever their own privacy policy says — the file has left your control and is being processed on hardware you do not own.

That is the part that surprises people. The question is not whether the vendor is trustworthy or where their servers are. It is whether the file was sent at all.

The clauses that come up most often

Unreleased material under embargo — a product announcement, an earnings call, anything with a date on it. Legal and medical recordings, where the obligation sits on the profession rather than the contract. Internal corporate material that names people or numbers. And increasingly, clauses that forbid the material being used to train anybody's model.

That last one is worth reading for specifically. Some services reserve the right to use what you send them; some do not; some changed their terms after you signed up.

What you can do instead

Process locally. If the audio never leaves the machine, there is no disclosure to weigh up and no terms to re-read every quarter. The models that do this work well enough now run on an ordinary CPU, which was not true a few years ago and is the reason this question has a better answer than it used to.

If you must use a hosted service, get it in writing from the client, keep the approval, and check what the vendor says about retention and training — not what their marketing page says, but their terms.

A practical test before you send anything

Ask yourself one question: if the client asked today where this file has been, could you answer without a conversation you would rather not have? If the answer is no, do not upload it.

In short: Uploading is a disclosure. If the agreement forbids that, no amount of vendor trustworthiness fixes it — process the file locally instead.