Security · Network disclosure
Every network connection the app can make.
Below is every outbound connection, what it sends, and how to switch it off. You can confirm the local-first claim yourself with the in-app network log or a packet capture.
Last verified against v0.6.54 · 2026-07-23
The core promise
Meeting audio, transcripts, summaries, and voiceprints never leave the device. Transcription, speaker diarization, voice matching, and AI summarization all run locally. The table below is the complete list of network traffic the app can generate.
Applies to v0.6.54 and later. Local-app licence, referral and Sentry connections have been retired.
Connections
| # | Purpose | Destination | When | What is sent | Off switch |
|---|---|---|---|---|---|
| 1 | Auto-update check + download | GitHub Releases (public release repo) | App start / manual “Check for updates” | HTTP GET only; no user data. Standard HTTP metadata (IP, user agent) reaches GitHub. Updates are ed25519-signature-verified before install. | Hard Offline Mode pauses it; per-brand auto-update flag |
| 2 | AI model download | GitHub (public model repo) | First-run wizard, model change, repair; always user-initiated | HTTP GET of model files; no user data | Don't run downloads; offline mode blocks |
| 5 | In-app feedback (user-triggered) | LocalTranscript feedback endpoint | Only when the user opens the feedback form and clicks Send | Message, optional reply email, app version, explicitly attached screenshots and optional diagnostic-log tail | Do not send feedback; Hard Offline Mode blocks it |
| 6 | Cloud transcription / cloud AI (optional providers) | OpenAI, Anthropic, or Infomaniak (Switzerland), as the user chooses | Only when the user explicitly configures a cloud provider with their own API key. Local is the default | Meeting audio (cloud transcription) or transcript text (cloud AI actions), sent to the provider the user chose under the user's own account | Never configure a provider; “local” is the default; Hard Offline Mode blocks |
| 7 | Calendar fetch (iCal) | The user's own calendar URL | Only when the user configures a calendar URL | HTTP GET of the iCal feed | Don't configure; offline mode blocks (LAN URLs still allowed) |
What never has a network path
Your meetings database, audio clips, and voiceprints stay in the app’s local data folder. Protected by your operating-system account; we recommend BitLocker on Windows or FileVault on Mac.
For IT & data protection officers
In the default configuration, meeting content is processed on-device only, so there is no cloud processor to assess for FADP/GDPR purposes. Speaker recognition is local-only biometrics. Hard Offline Mode and the exportable audit log serve as the procurement demo.
White-label builds and managed installs (MSI for SCCM / Intune / Group Policy) are available, including pre-baked defaults. Questions, DPIA support, or a pilot: hello@localtranscript.com.
All local features free · no card · no account