Security · Network disclosure

Every network connection the app can make.

Below is every outbound connection, what it sends, and how to switch it off. You can confirm the local-first claim yourself with the in-app network log or a packet capture.

Last verified against v0.6.54 · 2026-07-23

The core promise

Meeting audio, transcripts, summaries, and voiceprints never leave the device. Transcription, speaker diarization, voice matching, and AI summarization all run locally. The table below is the complete list of network traffic the app can generate.

Applies to v0.6.54 and later. Local-app licence, referral and Sentry connections have been retired.

Connections

#PurposeDestinationWhenWhat is sentOff switch
1Auto-update check + downloadGitHub Releases (public release repo)App start / manual “Check for updates”HTTP GET only; no user data. Standard HTTP metadata (IP, user agent) reaches GitHub. Updates are ed25519-signature-verified before install.Hard Offline Mode pauses it; per-brand auto-update flag
2AI model downloadGitHub (public model repo)First-run wizard, model change, repair; always user-initiatedHTTP GET of model files; no user dataDon't run downloads; offline mode blocks
5In-app feedback (user-triggered)LocalTranscript feedback endpointOnly when the user opens the feedback form and clicks SendMessage, optional reply email, app version, explicitly attached screenshots and optional diagnostic-log tailDo not send feedback; Hard Offline Mode blocks it
6Cloud transcription / cloud AI (optional providers)OpenAI, Anthropic, or Infomaniak (Switzerland), as the user choosesOnly when the user explicitly configures a cloud provider with their own API key. Local is the defaultMeeting audio (cloud transcription) or transcript text (cloud AI actions), sent to the provider the user chose under the user's own accountNever configure a provider; “local” is the default; Hard Offline Mode blocks
7Calendar fetch (iCal)The user's own calendar URLOnly when the user configures a calendar URLHTTP GET of the iCal feedDon't configure; offline mode blocks (LAN URLs still allowed)

What never has a network path

Your meetings database, audio clips, and voiceprints stay in the app’s local data folder. Protected by your operating-system account; we recommend BitLocker on Windows or FileVault on Mac.

For IT & data protection officers

In the default configuration, meeting content is processed on-device only, so there is no cloud processor to assess for FADP/GDPR purposes. Speaker recognition is local-only biometrics. Hard Offline Mode and the exportable audit log serve as the procurement demo.

White-label builds and managed installs (MSI for SCCM / Intune / Group Policy) are available, including pre-baked defaults. Questions, DPIA support, or a pilot: hello@localtranscript.com.

All local features free · no card · no account