Security · Network disclosure
Every network connection the app can make.
Below is every outbound connection, what it sends, and how to switch it off. You can confirm the local-first claim yourself with the in-app network log or a packet capture.
Last verified against v0.6.65 · 2026-09-16
The core promise
By default, meeting audio, transcripts, summaries and voiceprints are processed locally. Optional cloud providers, integrations and companion features have separate data flows. The disclosure below explains network behavior and exceptions.
Applies to v0.6.65 and later. Hard Offline Mode is enforced in the application core, including the update check; every redirect is re-checked and local traffic is never sent through a proxy. An administrative policy file can lock it for a whole organisation.
Connections
| # | Purpose | Destination | When | What is sent | Off switch |
|---|---|---|---|---|---|
| 1 | Auto-update check + download | GitHub Releases (public release repo) | App start / manual “Check for updates” | HTTP GET only; no user data. Standard HTTP metadata (IP, user agent) reaches GitHub. Updates are ed25519-signature-verified before install. | Hard Offline Mode refuses it in the application core and logs the attempt; the administrative policy can disable updates |
| 2 | AI model download | Hugging Face (primary model host), then GitHub public release repos (fallback mirror and the llama.cpp runtime). Every download is checksum-verified | First-run wizard, model change, repair; always user-initiated | HTTP GET of model files; no user data | Don’t run downloads; offline mode blocks; an internal mirror can be allow-listed by policy |
| 5 | In-app feedback (user-triggered) | LocalTranscript feedback endpoint | Only when the user opens the feedback form and clicks Send | Message, optional reply email, app version, explicitly attached screenshots and optional diagnostic-log tail | Do not send feedback; Hard Offline Mode blocks it |
| 6 | Cloud transcription / cloud AI (optional providers) | OpenAI, Anthropic, or Infomaniak (Switzerland), as the user chooses | Only when the user explicitly configures a cloud provider with their own API key. Local is the default | Meeting audio (cloud transcription) or transcript text (cloud AI actions), sent to the provider the user chose under the user's own account | Never configure a provider; “local” is the default; Hard Offline Mode blocks |
| 7 | Calendar fetch (iCal) | The user's own calendar URL | Only when the user configures a calendar URL | HTTP GET of the iCal feed | Don't configure; offline mode blocks (LAN URLs still allowed) |
Documents for IT and data protection
Written for IT departments and data protection officers, for the current version. English only for now; German versions on request.
- Network disclosure Every connection the application can make, and how to verify it yourself.
- Managed Windows installation Signing, paths, silent install, AppLocker, EDR, proxy, terminal servers.
- Administrative policy Central settings via policy.json: enforce offline mode, block cloud, disable features.
- Deletion concept Which data lives where, for how long, and how it is deleted.
- Security concept Protection goals, measures, shared responsibility, limits.
- DPIA support Fillable template with risks, TOM list and record-of-processing entry.
What never has a network path
Your meetings database, audio clips, and voiceprints stay in the app’s local data folder. Protected by your operating-system account; we recommend BitLocker on Windows or FileVault on Mac.
For IT & data protection officers
In the default configuration, meeting content is processed on-device only, so there is no cloud processor to assess for FADP/GDPR purposes. Speaker recognition is local-only biometrics. Hard Offline Mode and the exportable audit log serve as the procurement demo.
Managed installs (MSI for Intune / Group Policy) and an administrative policy file that locks offline mode, blocks cloud providers and disables features for a whole organisation are available. A custom edition with its own name and defaults is available on request. Questions, DPIA support, or a pilot: hello@localtranscript.com.
All local features free · no card · no account