Security Overview
TalkWriter is built with a security-first approach. Your voice data and dictated text are protected at every stage, from the moment you speak to the moment your words appear on screen.
Core Security Principles
- Zero audio retention — Your voice recordings are never stored. Audio is processed in real-time and immediately discarded.
- End-to-end encryption — All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
- Minimal data collection — We only collect what is strictly necessary to provide the service.
- Privacy by default — No data sharing, no ad tracking, no third-party analytics on your content.
- User control — You can enable Privacy Mode to prevent even temporary text processing on our servers.
Compliance Certifications
| Certification | Status | Scope | Available On |
|---|---|---|---|
| SOC 2 Type II | ✅ Certified | Security, Availability, Confidentiality | Enterprise |
| HIPAA | ✅ Compliant | Protected Health Information (PHI) | Enterprise |
| ISO 27001 | ✅ Certified | Information Security Management | Enterprise |
| GDPR | ✅ Compliant | EU personal data protection | All plans |
| CCPA | ✅ Compliant | California consumer privacy | All plans |
Compliance reports and certifications are available upon request. Email security@talkwriter.ai.
Security by Plan
| Security Feature | Free | Pro | Enterprise |
|---|---|---|---|
| TLS 1.3 encryption | ✅ | ✅ | ✅ |
| AES-256 at rest | ✅ | ✅ | ✅ |
| Zero audio retention | ✅ | ✅ | ✅ |
| Privacy Mode | ❌ | ✅ | ✅ |
| SSO / SAML 2.0 | ❌ | ❌ | ✅ |
| SCIM provisioning | ❌ | ❌ | ✅ |
| Audit logs | ❌ | ❌ | ✅ |
| SOC 2 report access | ❌ | ❌ | ✅ |
| HIPAA BAA | ❌ | ❌ | ✅ |
| Custom data residency | ❌ | ❌ | ✅ |
Infrastructure
- Cloud provider — Hosted on industry-leading cloud infrastructure with SOC 2 certification
- Data regions — US East (default), EU West (Enterprise option)
- Uptime SLA — 99.9% for Pro, 99.95% for Enterprise
- Backups — Encrypted daily backups with 30-day retention
Responsible Disclosure
We welcome security researchers. See our Vulnerability Disclosure page for scope, rewards, and safe harbor details.
FAQ
Does TalkWriter sell my data? No. We never sell, share, or monetize user data in any way.
Can I request deletion of all my data? Yes. Go to Settings → Account → Delete Account, or email privacy@talkwriter.ai.
Where can I read the full privacy policy? Visit talkwriter.ai/privacy.