HEALTHCARE & CLINICAL TEAMS · AUGUST 2026
On-device medical dictation, under pilot controls.
Cloud dictation means a vendor's servers receive what a clinician says. LockedIn Flow has no vendor transcription backend: recognition and cleanup run on the Mac itself. This page explains — carefully and without overclaiming — what that changes for a healthcare deployment, and how the Clinical Mode pilot program works.
Why processing location matters here
When dictation is transcribed in a vendor cloud, that vendor's infrastructure, retention, subprocessors, and contracts all enter your risk analysis, and a business associate relationship typically follows. LockedIn Flow removes that entire category: core dictation audio and transcript text are processed on the Mac and are not sent to Zero G Foundry for transcription. Network use is limited to the one-time speech-model download and optional, signed update checks — both of which can be handled by MDM pre-seeding and egress control on managed fleets, as described in the security review.
What local processing does not do: it does not by itself make a deployment HIPAA-compliant, and we claim no HIPAA, FedRAMP, or SOC 2 certification. HHS guidance is clear that vendor status and compliance depend on the specifics of the deployment, and every organization still owes its own documented risk analysis covering all electronic PHI and its environment. LockedIn Flow reduces one large exposure — a transcription provider receiving clinical speech — and leaves the rest of your program where it belongs: with you.
The general product, in clinical terms
Scroll horizontally to inspect both columns.
| Property | Behavior |
|---|---|
| Speech recognition | Parakeet on the Apple Neural Engine, on device |
| Vendor transcription backend | None — audio and transcripts are not sent to us |
| Accounts / analytics | No account, no analytics SDK, no telemetry of content |
| Password & secure fields | Detected and refused before the microphone opens |
| History retention | Encrypted at rest; configurable from off to forever, with purge |
| Custom vocabulary | Explicit, reviewable, removable rules — nothing silently learned |
| Licensing | Offline signature validation; no phone-home |
Clinical Mode — a pilot program, not a checkbox
We are building a dedicated Clinical profile for narrow, human-reviewed documentation workflows. It is in development and being prepared for a contact-sales pilot — it is not currently available, is not part of the shipping product, has no public pricing, and will not be promoted until its evidence gates pass. In the pilot candidate:
- Deterministic processing only. Generative rewriting, translation, snippets, and voice commands are disabled for clinical drafts. Cleanup is a fixed rule set, and any terminology or repair lexicon is versioned, explicitly approved, listed change-by-change in review, and reversible. Nothing learns from what clinicians dictate.
- Every draft pauses for human review. The clinician sees the draft beside the raw transcript, with medication, dosage, laterality, negation, and numeric details called out for confirmation before anything is inserted.
- Protected delivery. Insertion returns only to the exact field where recording began, verified before writing; there is no clipboard fallback for clinical drafts.
- No general recovery. Clinical drafts stay out of normal history and recovery. A secure-field failure is discarded; other delivery failures remain inside the controlled review flow for retry or explicit discard, never copied to the clipboard or parked in general recovery.
- Honest measurement. Accuracy work runs against hash-pinned synthetic corpora with published methods, and we say so plainly when a result does not support promotion. Clinician-recorded evaluation with pre-committed thresholds is a gate we have not yet passed — which is exactly why Clinical Mode is a pilot.
The statement we make to pilot organizations, in full: “Core dictation audio and transcript text are processed on the managed Mac and are not sent to Zero G Foundry for transcription. The approved Clinical candidate adds local, fail-closed safeguards for a narrow, human-reviewed documentation workflow. The organization remains responsible for its deployment-specific risk analysis, contracts, policies, device and workforce controls, training, incident response, and destination-system behavior.”
What we will not tell you
We will not tell you this is “HIPAA-compliant software,” that accuracy is clinically validated, that it works in every EHR and browser, or that a tool can replace clinician review or your risk analysis. Vendors who say those things are describing marketing, not architecture. What we offer instead is an unusually inspectable system — signed builds, documented data flow, published limitations — and a pilot process that starts with synthetic data and earns its way to real workflows.
Beyond healthcare
The same properties — no vendor transcription backend, offline operation on locked-down fleets, explicit vocabulary, encrypted local retention with an off switch — apply to legal, finance, and public-sector teams whose words cannot leave the building. The security review is written for those evaluations too.
Questions clinical teams ask first
Is LockedIn Flow “HIPAA-compliant software”?
No. We do not claim HIPAA certification or that installing one app makes a deployment compliant. Your organization remains responsible for its deployment-specific risk analysis, policies, device controls, workforce practices, contracts, incident response, and destination systems.
Does dictation go to a vendor cloud?
Core dictation audio and transcript text are processed on the Mac and are not sent to Zero G Foundry for transcription. The one-time speech-model download and optional signed update checks are the disclosed network paths.
Is Clinical Mode in the public Mac download?
No. Clinical Mode remains an unreleased, contact-sales pilot candidate with mandatory human review and evidence gates. The public Mac download is the individual product, not the Clinical Mode pilot.
CLINICAL PILOT · CONTACT-SALES ONLY
Talk to us about a pilot.
Tell us about your documentation workflow and controls. We'll share the pilot administration packet, current evidence, and the gaps we still have — before you commit anything.
Request a Clinical pilot reviewStatements reviewed against the current app source and clinical program documentation, August 11, 2026. Clinical Mode remains unreleased; individual Pro and the 14-day trial are available today from the download page.