Enterprise Security & Trust Center

Engineered for Absolute Privacy

Your career, voice, and code are sacred. We engineered offcuff.ai with a zero-retention, RAM-only architecture that makes data leaks technically impossible.

100% Invisibility at OS Level

Window hooks into the OS compositor directly (WDA_EXCLUDEFROMCAPTURE on Windows and CGWindowSharingType.none on macOS). Screen capture software cannot physically render the overlay pixels.

Volatile RAM-Only Buffer

Audio frames from speaker loopback and microphone exist strictly in volatile RAM ring buffers. As soon as transcription frames are processed, memory is wiped. Zero disk writes.

Microsoft SQL RLS & AES-256

Uploaded documents and resumes are indexed in private Microsoft SQL Server instances with Row-Level Security (RLS) and AES-256 encryption at rest. Delete any record permanently with 1 click.

The Ephemeral Data Flow Pipeline

How audio travels through offcuff.ai without ever touching persistent cloud storage.

STEP 01

Local Audio Loopback

CoreAudio or WASAPI taps speaker & mic audio. No external bot joins the call guest list.

STEP 02

RAM Ring Buffer

Audio is segmented into 16-bit PCM streaming buffers in volatile computer memory.

STEP 03

Encrypted Inference

Transcripts stream over TLS 1.3 to private dedicated inference clusters in under 84ms.

STEP 04

Immediate Memory Wipe

HUD displays the response. Raw audio buffers are zero-filled immediately. Nothing saved to disk.

Compliance & Regulatory Readiness

SOC 2 Type IICompliant

Annual audits covering security, confidentiality, and processing integrity.

GDPR & CCPACertified

Full data sovereignty rights, instant 1-click purge, and zero data selling guarantee.

ISO/IEC 27001Aligned

Rigorous information security management systems governing all client operations.

Penetration TestingZero Highs

Quarterly gray-box security evaluations conducted by independent cybersecurity firms.

Download the Complete Security Whitepaper

24-page technical architectural analysis covering Desktop Window Manager hooks, memory sanitation procedures, and WebRTC peer-to-peer crypto.