πŸ”’ LOCVAK ARCHITECTURAL INVARIANT Β· ZERO-CLOUD PRIVACY

Talk freely.
What you say stays on your machine. Period.

Most dictation software and speech APIs transmit your audio and personal text to remote third-party cloud data centers. LocVak was engineered from the silicon up on a non-negotiable architectural invariant: not a single byte of your voice, keystrokes, or transcripts ever leaves your physical device.

βœ“ 100% Air-Gapped Capable
βœ“ Zero Cloud Transcription APIs
βœ“ 100% On-Device Processing
βœ“ Zero Telemetry on Spoken Content
βœ“ Independently Verifiable by Anyone
β€œPrivacy is not a toggle in our preferences menuβ€”it is an unbreakable physical and cryptographic boundary. We cannot read your documents, we cannot hear your voice, and we cannot be compelled to surrender data that never existed on our servers in the first place.”
The LocVak Engineering Principles β€” Zero-Knowledge On-Device AI

The Four Architectural Invariants

How LocVak guarantees airtight confidentiality through physical on-device engineering.

01

Device-Native Inference

All neural speech engine weights reside locally on your computer and execute directly in system memory. Computation runs 100% on-device using your machine's built-in processing power. Zero computation is offloaded to remote servers.

02

Zero-Retention Processing

Microphone audio is processed entirely in volatile temporary memory. The moment transcription completes and words are typed directly at your cursor, all audio memory is instantly cleared. No audio files (.wav, .mp3) are ever written to your disk or stored in permanent cache.

03

Zero External Network Sockets

The core dictation pipeline does not open any external network connections. LocVak works identically whether your device is connected to high-speed fiber, in airplane mode at 35,000 feet, or physically air-gapped in a secure facility.

04

Never Used for Model Training

Cloud voice providers routinely harvest user audio to train their commercial generative AI models. Because LocVak operates exclusively on frozen, on-device neural weights, your voice, proprietary trade secrets, and client conversations are never used to train any AI model.

LocVak vs Cloud Voice Providers

See how on-device architecture compares with traditional cloud-dependent voice services.

Security & Architecture Metric LocVak (On-Device) Otter.ai / Fireflies OpenAI Whisper API Apple / Microsoft Cloud Dictate
Where Audio Is Processed βœ“ 100% On-Device βœ— Cloud Data Centers βœ— Cloud API Servers βœ— Cloud Server Fleet
Works in 100% Airplane Mode βœ“ Yes (Zero Internet) βœ— No (Fails completely) βœ— No (Fails completely) βœ— Limited / Degraded
Audio Stored on Remote Servers βœ“ 0 Bytes Ever βœ— Yes (Stored in Cloud) βœ— Retained up to 30 Days βœ— Logged & Sampled
Customer Data Used for AI Training βœ“ Never (Frozen Weights) βœ— Subject to Terms βœ— Subject to Policy βœ— Used for Siri/Copilot
Safe for Attorney-Client Privilege & NDAs βœ“ 100% Safe (No 3rd Party) βœ— Third-Party Disclosure βœ— Third-Party Disclosure βœ— Cloud Disclosure Risk
HIPAA & Clinical Documentation Safety βœ“ Inherent (No PHI Transmission) βœ— Requires Enterprise BAA βœ— Requires Custom BAA βœ— Varies by Agreement
Vulnerable to Cloud Breaches & Subpoenas βœ“ Immune (Zero Cloud Footprint) βœ— Vulnerable to Cloud Leaks βœ— Vulnerable to API Breaches βœ— Vulnerable to Cloud Leaks

The Independent Verification Playbook

We invite security researchers, corporate CISOs, and privacy enthusiasts to audit our binary. Here is how you can verify our claims.

1

The Physical Air-Gap Test

Turn off your Wi-Fi, unplug your Ethernet cable, and switch on Airplane Mode. Press your shortcut and speak for two minutes. LocVak will transcribe your speech at full speed with identical sub-600ms latency.

# Test via Terminal (macOS):
networksetup -setairportpower en0 off
2

Application Firewall Audit

Install an interactive network monitor like Little Snitch, Objective-See LuLu, or GlassWire. Set filter rules to alert on any outbound network connection from the LocVak process. You will observe zero network connection attempts during active voice dictation.

# Monitor network sockets for LocVak:
lsof -i -P | grep -i "locvak"
3

Deep Packet Inspection (Wireshark)

Launch Wireshark or run tcpdump to capture raw network packets while dictating. Inspect the capture log for external DNS resolutions, HTTPS POST payloads, or WebSocket handshakes originating from LocVak. Zero voice packets are transmitted.

# Live packet capture during dictation:
sudo tcpdump -i any 'tcp or udp' -nn
4

Disk I/O & File System Inspection

Use macOS fs_usage or Windows Process Monitor (Procmon) to monitor file system activity during speech capture. Verify that LocVak does not create temporary audio files or write microphone streams to your SSD.

# Track file writes in real-time:
sudo fs_usage -w -f filesys LocVak

Built for Confidential Professions

When a single data leak can ruin a trial, compromise patient trust, or violate an NDA.

βš–οΈ

Legal & Litigation

Preserve strict attorney-client privilege. Dictate sensitive depositions, trial briefs, and client notes without third-party cloud subpoena exposure.

🩺

Healthcare & Therapy

Clinical notes and patient sessions remain inherently HIPAA compliant by eliminating the cloud vendor transmission boundary entirely.

πŸ’Ό

Finance & Executive

Dictate confidential earnings projections, M&A strategy memos, and private investment theses without risking leaks or competitor espionage.

πŸ’»

Engineering & IP

Document proprietary code architectures, trade secrets, and patents freely without feeding your company’s intellectual property to public AI models.

Frequently Asked Privacy Questions

Does LocVak send any telemetry or crash analytics?

By default, LocVak collects 0 telemetry. If you voluntarily opt-in to anonymous quality telemetry in Settings, it only reports basic performance statistics (such as average inference latency). It never captures, logs, or transmits audio snippets or text transcripts.

Where are my custom words and settings stored?

All user preferences, custom vocabulary acronyms, and keyboard shortcuts are stored locally in a plain JSON file inside your user directory (~/.locvak/config.json). They are never synced to a remote database.

How does LocVak receive software updates?

App updates are delivered via secure HTTPS checking against a cryptographic manifest signed with our Apple Developer ID. The update check only queries the latest version number and transmits no hardware identifiers or personal usage data.

Can LocVak be deployed on air-gapped enterprise machines?

Yes. LocVak is completely self-contained. The application bundle and neural model weights can be packaged via MDM (Jamf, Kandji, Microsoft Intune) onto machines with zero internet access, and it will operate without interruption.

Dictate with Total Peace of Mind

Join thousands of professionals who write 6x faster without compromising their privacy, trade secrets, or client confidentiality.

Request Early Access Pass