Current controls
- Local-first dictation and note handling path.
- Keychain-backed API key storage for BYOK workflows.
- Optional cloud routes instead of mandatory always-cloud capture.
- Workspace-scoped data model in cloud features.
TypeHopSecurity and Privacy
TypeHop security architecture and hardening roadmap
TypeHop is designed for privacy-conscious teams that need practical speed without giving up control over dictation data and model access.
Near-term hardening roadmap
- API authentication for trusted desktop clients.
- Signed desktop-to-API requests with token rotation strategy.
- Rate limiting and abuse protection on public endpoints.
- Expanded observability with structured logs and alerts.
Team evaluation checklist
- Define which workflows must remain local-only.
- Decide key ownership policy for model providers.
- Set retention requirements for cloud-synced notes.
- Review roadmap controls against compliance deadlines.