Security & Privacy

Draft runs entirely on your device.

• Text is processed locally
• Audio is processed locally
• No content is sent to external servers
• No cloud inference is used

Draft works without an internet connection.

Draft does not:

• upload text
• store user content
• retain transcripts
• log keystrokes
• analyze usage behavior

All text exists only in memory during the active operation and is discarded immediately after processing.

Draft does not require:

• an account
• email registration
• authentication
• API keys

Draft does not identify users or devices.

Draft does not collect analytics.

The only optional data is:

• crash reports (explicitly opt-in)
• diagnostic logs you manually export for support

By default, Draft sends nothing.

• Draft is a signed and notarized macOS application
• The language engine runs as a sandboxed local service
• Draft cannot access files outside its own directories unless you explicitly select them

• Configuration files are stored locally on disk
• Draft relies on standard macOS file system protections
• Draft does not manage encryption keys because no data leaves your device

Draft works fully offline.

Network access is not required for:

• rewriting
• summarizing
• drafting replies
• extracting action items
• improving prompts
• translation

You can use Draft in airplane mode.

Draft's architecture avoids many common compliance concerns by design:

• No cloud processing
• No data retention
• No subprocessors
• No data residency questions
• No third-party AI services

Draft is suitable for:

• internal company communication
• legal drafts
• financial notes
• code and technical documentation

Draft is a local productivity tool, not a SaaS platform.

Because Draft does not process or store data on remote systems, many traditional vendor risk categories do not apply.

If your security or legal team has questions, we are happy to provide a technical overview.