Security model
Less infrastructure means less bullshit to review.
The enterprise case is straightforward: if dictation runs locally, there is no customer audio pipeline for you to audit, no vendor storage layer to reason about, and far fewer procurement surprises.
At a glance
- No analytics, crash logs, or telemetry shipped with the app.
- No backend servers. The marketing site is a static export and the app works offline.
- Dictation stays on device. Audio is never uploaded.
- Optional bring-your-own-key rewrite goes directly from the device to your provider.
- Payments and licensing are handled by Apple via StoreKit.
- One app-owned request exists: a plain GET to files.carelesswhisper.app/review-gate.json every six hours, with no body, no identifier, and a three-field JSON response.
HIPAA-compatible default
HIPAA becomes a vendor problem when PHI is transmitted to that vendor. Voice Type performs dictation entirely on-device and we never receive PHI, so a BAA is typically not required for the default offline workflow.
SOC 2 fit
SOC 2 evaluates controls for systems handling customer data. Voice Type does not operate a customer data processing service. For procurement, the Trust Center describes the architecture and names every subprocessor, and we answer questionnaires by email.
Network and MDM
Required allowlist is Apple StoreKit licensing endpoints plus files.carelesswhisper.app. Optional allowlist is whichever rewrite provider you choose. Distribution is through the Mac App Store and works with standard macOS MDM flows.
Comparison
Where the compliance story differs.
| Product | Where it runs | Posture | Notes |
|---|---|---|---|
| Voice Type | On device (macOS) | No analytics, no logging, HIPAA-compatible offline mode | Optional BYO-key rewrite flows device → provider; nothing passes through us. |
| Wispr Flow | Cloud | SOC 2 Type II; HIPAA-ready with additional controls | Cross-platform with enterprise administrative controls. |
| Otter | Cloud | SOC 2 Type II; HIPAA on Enterprise plan with BAA | Meeting agent and collaboration feature set. |
Competitor notes are directional and based on public disclosures, not a blood oath.
Procurement kit
What a reviewer can get today.
- A named subprocessor list on the Trust Center: Apple, Cloudflare, PostHog. None of the three is ever in the path of a spoken word.
- A written data-flow description covering every outbound call the app makes, so you can check it against a network monitor instead of taking our word for it.
- Answers to your own vendor questionnaire by email. We do not have a pre-filled one, and we would rather answer yours than hand you ours.
- Priority email support for volume purchases.