CARE AT EVERY STEP
HTTPS / TLS in transit · AES-256 cloud storage · AES-256-GCM audio recovery · Password-encrypted case backups
Private case data requires approved sign-in. Cloudflare manages encryption keys for hosted D1 records and R2 originals. Pending audio chunks use a non-exportable browser key; this helps protect local storage but does not protect an unlocked or compromised device. New case backups and metadata exports are password-encrypted in your browser using AES-256-GCM and PBKDF2-SHA-256; keep the passphrase separately.
Selected content must be decrypted for authorized AI, transcription and voice processing. This service is not end-to-end encrypted. Downloaded reports, individual originals and older backups are not automatically password-encrypted. The public review contains fictional examples only. Encryption does not establish a legal-compliance certification.