SECURITY & ENTERPRISE · UPDATED JULY 2026
Security review, in plain facts.
Everything an IT or InfoSec team needs to evaluate LockedIn Flow for an evaluation: where dictation data is processed, what permissions the app requests, how it is signed, and which deployment features are available today.
The one-sentence posture
LockedIn Flow has no vendor transcription backend: dictation audio, transcripts, vocabulary, and screen content are not sent to us. Network access is limited to the initial model download and optional update checks.
Data flow (complete)
| Stage | Where it happens | Leaves the device? |
|---|---|---|
| Microphone capture | Best-effort Apple system voice processing, then in-process 16 kHz mono, in-memory capture; transparent fallback when unsupported | No |
| Speech recognition | Parakeet TDT v3 on the Apple Neural Engine | No |
| Text cleanup | Rules on macOS 15+; optional Apple FoundationModels on macOS 26+ | No |
| Insertion | OS APIs (Accessibility / pasteboard) | No |
| History & vocabulary | AES-256-GCM files, Keychain-held key | No |
| Model download | One time, ~600 MB, huggingface.co | Outbound, once |
| Update check | Ed25519-signed Sparkle release feed | Outbound when enabled |
Permissions — the whole list
- Microphone — capture only.
- Accessibility — to insert text at the cursor and to refuse password fields. Screen content is never read, stored, or transmitted.
- Never requested: Full Disk Access, Contacts, Calendar, Location, Screen Recording, Input Monitoring, Camera.
Code signing & supply chain
- Signed with Developer ID Application: Zero G Foundry LLC (643FW3ZH6M), Apple hardened runtime, minimal entitlements (audio input only).
- Notarized and stapled via Apple notarytool.
- Updates: Sparkle 2 and Ed25519 verification are integrated; the public release feed is not yet active.
- License validation: offline Ed25519 signatures. No activation server, no phone-home, no device fingerprinting.
- Dependencies are all MIT/Apache-2.0 (Parakeet model: CC-BY-4.0). No GPL. SBOM available on request.
Offline enforcement for locked-down fleets
After the one-time model download, the app works with all egress blocked —
verified in our self-test with network fetches refused at the library level. Models can be
pre-seeded via MDM into ~/.cache/fluidaudio, and there is no account, activation,
or revalidation heartbeat for a firewall to learn to hate.
Data governance
- Raw audio is never written to disk, ever.
- Transcript history: AES-256-GCM at rest, retention from off to forever, with a user-visible purge control.
- Logs are metadata-only; transcript content is never logged.
- No analytics, no crash-report endpoints, no third-party SDKs with network behavior.
Deployment
- Individuals: notarized DMG, drag-install, guided first-launch permission flow.
- Managed fleets: the signed DMG and model can be distributed through existing deployment tooling. Organization-specific permission and MDM guidance is part of the team pilot.
- VDI: works subject to microphone redirection in your VDI stack — the same caveat as any dictation tool.
- Windows: early development. Core validation tests pass, but Windows-hardware end-to-end validation is not complete. Join the waitlist.
What we don't claim
No HIPAA, FedRAMP, or SOC 2 certification is claimed. The architecture removes the largest compliance surface because no third party receives dictation content — and your own device management (FileVault, screen lock, MDM) completes the posture. We're happy to answer your security questionnaire through the contact and support form.
FREE 14-DAY TRIAL · NO CARD · NO ACCOUNT
Evaluate the Mac build.
Everything is unlocked for 14 days. Team deployment controls remain a pilot rather than a generally available product.
Download for macOSArchitecture statements reviewed against the current app source, July 30, 2026. Release-feed activation and team deployment controls are still pending.