Security approach

Two separate things live under this word: how the application will be built and delivered, and how this website is served. Both are described here, including what has not been done.

The application

The application is in development. Nothing below has been independently reviewed, audited or certified, and no security assessment has been performed by a third party. These are design commitments we intend to be held to, not results we are reporting.

Signed updates and rollback

Updates that are cryptographically signed, verified before install, and reversible.

Planned

Least privilege on your disk

The application is designed to read only the folders you grant, and to hold its index where you can find it, inspect it and delete it.

Private beta

No silent network access

Designed so that local-only mode functions with outbound access blocked, and so that anything leaving the machine is something you approved.

Private beta

Third-party engine provenance

Inference engines are used under their own licences, redistributed unmodified where that is the arrangement, with upstream notices and pinned versions recorded in the application.

Prototype

There is no end-to-end encryption in this product. There is no compliance certification. There is no penetration test report. When any of those exists, it will be named here with a date and a scope.

This website

The site is a set of static files. There is no application server, no database and no user account, so most of the ways a marketing site gets compromised do not apply to it.

Served over HTTPS only, with HTTP redirected and HSTS set.
A content security policy that allows scripts, styles, fonts and connections from this origin only. There are no third-party scripts, no trackers, no advertising pixels and no embedded widgets.
Fonts are served from this origin rather than from a font CDN, so visiting a page contacts nobody else.
Framing is refused outright, content type sniffing is disabled, and the referrer policy is restrictive.
The origin storage is private and reachable only by the content delivery network, never directly from the internet.
No cookies are set and no analytics are running. Nothing on this site profiles you.

Found something wrong? The responsible disclosure policy explains how to tell us.