Nothing to breach, because nothing is collected.
Most dictation apps can leak your voice because they hold it. Inmost has no copy of it to lose. Everything below is a property you can check on the Mac in front of you, not a promise.
Speech stays on the device
Recognition runs on your Mac. Audio is decoded in memory and dropped once the text is inserted. There is no upload path for audio in the app, no bucket it lands in, and no retention policy to read, because there is nothing kept.
If you pick a model that runs behind a server, that server is on 127.0.0.1: your own machine, over the loopback interface, which cannot reach a network.
No account, no telemetry
There is no sign-in, no device enrollment, no analytics SDK and no crash reporter. The app does not contain a telemetry endpoint. A network monitor shows traffic only when you buy, activate, check for an update, or press Send on a feedback report.
The build is signed and notarized
Inmost ships as a Developer ID build notarized by Apple. Gatekeeper checks it before the first launch, and macOS refuses a bundle that was modified after signing. Run these on the installed app and compare:
codesign -dv /Applications/Inmost.app
spctl -a -vv /Applications/Inmost.appTampering with the binary, the license check or the update feed breaks the signature.
The license is a signature, not a lookup
A key is a signed statement verified on your Mac with a public key built into the app, so dictation never asks anyone for permission and works with the Wi-Fi off. Activation makes one call, once, carrying the key and a short hash of the hardware identifier, which is not reversible into the identifier itself. If that call fails, activation still succeeds.
Updates are signed twice
The update feed is HTTPS from inmost.app and every entry is signed with an Ed25519 key that does not ship in the app, so a feed served by someone else cannot install anything. The DMG inside it is the Developer ID build Apple notarized.
For regulated work
Offline operation is the point for anyone whose speech is not allowed to leave the building: no audio, no transcript and no usage record crosses the network, so there is no data-processing agreement to sign for content that never arrives. On a network with no egress, every feature except the purchase and the update check works. Procurement, air-gapped evaluation and commercial licensing: hello@inmost.app.
What Inmost does not have yet
- No third-party security audit. The claims above are architectural, and the build is inspectable, but nobody outside has audited it.
- No SOC 2, ISO 27001 or FedRAMP. Those certify a cloud service; there is no cloud service here to certify.
- No managed deployment for fleets. Every Mac installs and activates on its own.
If a claim on this page stops being true, that is a bug and it gets fixed like one. Write to security@inmost.app.