Skip to content
Telmi

Security

Built so there's less to protect.

The safest copy of a call is the one we never receive. Telmi keeps your calls on your computer and sends the AI only the text it needs.

Your calls stay on your computer

  • Transcripts, notes, and coaching are saved as files on your device. Our servers never receive them.
  • On a Mac, speech is transcribed on the device. Audio never leaves your computer.
  • No bot joins your meetings. Telmi listens to your own mic and computer audio.
  • Delete a call by deleting its folder. There's no server copy to chase.

What our servers hold

  • Your account (name, email), plan, and subscription status.
  • A count of calls: a random ID, platform, start time, and duration. No titles, attendees, or content.
  • Hashes of app sign-in tokens. Never the tokens themselves.
  • Data lives in a Neon Postgres database. The site and API run on Vercel. Everything is served over HTTPS.

Signing in, without passwords in the app

  • The apps sign in through your browser with Clerk, then receive a random 256-bit token.
  • We store only its SHA-256 hash. The app keeps the token in the macOS Keychain or Windows Credential Manager.
  • Signing out revokes the token on our side immediately.

AI requests

  • The apps never hold an AI provider key. Requests go through our proxy, which checks your plan and swaps in our key.
  • The proxy only allows the few Gemini endpoints Telmi uses, rate-limits each account, and never logs request or response bodies.
  • Only text is sent: transcript excerpts, your notes, and the knowledge pack you chose. Screenshots only when you ask Telmi to look at your screen.

Windows speech

  • Windows audio is transcribed by Deepgram during the call.
  • The app gets a Deepgram key that expires after 10 minutes, scoped to you. Audio goes straight from your PC to Deepgram, not through our servers.

Payments

  • Stripe handles checkout and billing. Card numbers never touch our servers.
  • Plan changes come from Stripe's signed webhooks.

The apps

  • The Mac app is signed with an Apple Developer ID and notarized by Apple.
  • Updates are delivered with Sparkle and verified with an EdDSA signature before they install.
  • Telmi's windows are hidden from screen sharing on the Mac (best effort; some capture tools still show them).

Compliance and reporting

We're a small team and don't have a SOC 2 report yet. If your company needs a security questionnaire answered, email hello@usetelmi.com and we'll answer it honestly.

Found a vulnerability? Please email us with the details before sharing it publicly. We'll confirm we got it, keep you posted, and credit you if you'd like. See also our privacy policy.