Security

How we protect your data and maintain privacy

Our Security Commitment

Security and privacy are not features at Summit AI Notes—they are the foundation of everything we build. We've designed our architecture from the ground up to ensure your sensitive conversations and client data remain completely private and secure.

This document explains our security practices, architecture decisions, and what we do (and don't do) with your data.

Core Security Principles

Local-First Architecture

All audio processing, transcription, and AI summarization happens on your Mac. Your meeting data leaves your device only if you switch something on yourself — a cloud AI provider, or iCloud sync.

No Cloud Storage

We don't operate cloud servers for storing your data — there is no Summit backend at all. Recordings, transcripts, and notes live on your device. The one exception is iCloud sync: turn it on and your notes travel through your own iCloud account, encrypted with a key only you hold.

Zero Knowledge

We have zero knowledge of your meeting content. We literally cannot access your recordings, transcripts, or summaries—they never touch our servers.

User Control

You have complete control over your data. You decide where files are stored, when to export them, and when to delete them. No hidden uploads or syncing.

Security Architecture

Local Data Storage

All data is stored on your Mac using:

  • macOS file system encryption (FileVault support)
  • Sandboxed application storage for additional isolation
  • Secure credential storage using macOS Keychain
  • No plaintext sensitive data in logs or temporary files

Local AI Processing

Audio transcription and AI summarization use local processing:

  • Speech recognition runs entirely on your device
  • Language models run inside the app, on your Mac
  • No audio files sent to external services
  • Processing happens in isolated application memory

Optional Cloud AI (User-Configured)

If you choose to configure cloud AI providers:

  • Only text is sent, never audio: transcript excerpts for summarization, and — if you use chat — your question plus the snippets, topics and meeting titles it retrieves. Your own written notes are never included
  • You provide your own API keys. They are stored in your Mac's Keychain and sent only to the provider you configured — we never see them
  • Connections use TLS encryption in transit
  • Subject to the third-party provider's security and privacy policies
  • Can be disabled at any time to return to local-only processing

Network Security

Summit AI Notes has minimal network requirements:

  • Purchase verification, handled on-device by StoreKit — it contacts Apple, not a Summit server (Mac App Store version)
  • License activation, periodic license checks, and update checks against Summit's license server (direct download version). These send your license key, a device identifier, and your IP address — never meeting content
  • A daily App Store version check (sends only our bundle ID). It has no in-app off switch; block itunes.apple.com if you want it gone
  • Optional cloud AI requests (only if you configure it)
  • Optional iCloud sync, and optional model downloads from Hugging Face
  • Connections use TLS with the OS defaults
  • No telemetry or analytics — there is no analytics SDK in the app at all

That is the whole list. The architecture review walks through each one with source citations; it was written for the Mac App Store version and does not yet cover the direct download's license-server calls.

What We Don't Collect

It's important to be explicit about what we don't collect:

  • Meeting Audio: Audio recordings stay on your device—we never receive them
  • Transcripts: Transcription text is processed and stored locally
  • AI Summaries: Meeting summaries remain on your device
  • Meeting Content: We have no access to what's discussed in your meetings
  • Usage Patterns: No telemetry about what features you use (unless you opt in)
  • Search Queries: Searches happen locally—we don't see them
  • File Names or Metadata: Your meeting organization is private

Security Best Practices

While Summit AI Notes is designed with security in mind, we recommend these additional practices:

  • Enable FileVault: Use full-disk encryption on your Mac for additional protection
  • Keep macOS Updated: Install security updates promptly
  • Use Strong Passwords: Protect your Mac user account with a strong password
  • Lock Your Screen: Enable automatic screen locking when away
  • Backup Locally: Back up your Summit database to encrypted storage
  • Use Local AI Only: For maximum privacy, stick to the models that run inside Summit instead of cloud providers
  • Review Exports: Be mindful when exporting or sharing meeting content

Privacy by Architecture, Not by Promise

Most tools rely on policies and legal agreements to protect meeting data. Summit keeps processing on your Mac instead: with Local Models selected, meeting audio and text are not sent to an AI provider. That can remove some third-party questions from a compliance review, but it does not make Summit compliant with any regulation on its own.

EU AI Act

The EU AI Act regulates how AI systems process personal data. Summit's local-first architecture means your meeting data is never transmitted to external AI providers — no cross-border data transfers, no third-party processing, no data retention by AI vendors. Compliance is a byproduct of the architecture itself.

GDPR

Local processing means personal data stays under your control. No data processor agreements needed for meeting content, no cross-border transfer mechanisms required, and no third-party sub-processors to audit.

HIPAA

Summit is a meeting notes app, not a medical scribe, and is not certified for HIPAA or any other healthcare regulation. With Local Models selected, transcription, summaries and chat run on your Mac. If you choose a cloud AI provider, it receives transcript excerpts and, for chat, your question with related topics, action items and meeting titles and dates, so your organization decides whether that provider is approved and what agreements it needs. The app does not separately encrypt its local database or recordings; they rely on macOS protections, so turn on FileVault. Check with your compliance team before recording meetings that include patient information, and see the healthcare page for what to confirm first.

Attorney-Client Privilege & Financial Services

Local processing helps maintain attorney-client privilege by keeping privileged communications off third-party servers. Financial services data residency requirements are met by default — your data resides where your Mac resides.

Note: Users in regulated industries should evaluate their specific compliance needs and consult with their legal/compliance teams before use.

Learn more about digital sovereignty for European professionals →

Want the evidence, not the summary?

We publish a full data-flow and security architecture review of the app: every trust boundary, every outbound connection the app can make, every privacy-relevant default, and the limitations we found reading our own code — each claim anchored to a specific file and line at a pinned commit.

Read the architecture review →

Responsible Disclosure

We take security vulnerabilities seriously. If you discover a security issue, please report it responsibly:

  • Email: security@summitnotes.app
  • Provide detailed information about the vulnerability
  • Allow us reasonable time to address the issue before public disclosure
  • We'll acknowledge your report and keep you updated on our progress

We appreciate the security research community's efforts to keep our users safe.

Security Questions?

Have questions about our security practices or architecture?

Contact Us