Security and trust

The safest data is data we never have.

  • Recording, transcription and notes run on your device by default
  • Cloud AI is optional, uses your own key, and goes straight from your device to that provider
  • No meeting bot and no server-side recording
  • Team items are end-to-end encrypted (AES-256-GCM, keys wrapped per device with ECDH P-256); our server stores only ciphertext
  • Row-level security on every database table
  • Payments by Lemon Squeezy; we never handle card data
  • Account deletion is self-serve and immediate

Found a security issue? Email [email protected].

We don’t claim certifications we don’t hold. SOC 2 and HIPAA are not certified yet.