Know who you’re working with.

Framework approach

We use the NIST Cybersecurity Framework 2.0 Small Business Quick Start Guide to organize VoxInput security work across governance, identification, protection, detection, response and recovery. This is a working baseline, not a claim of NIST conformity, SOC 2 examination or ISO/IEC 27001 certification.

Website delivery

Netlify hosts the HTTPS website. The site configuration sets anti-framing, content-type and referrer-policy headers. Review response headers for this website to inspect the deployed state. These controls do not establish the security of every service engagement.

VoxInput release 0.1.5

The release manifest identifies a Windows 11 x64 MSI, file size and SHA-256. The current installer is unsigned. Inspect the public release and installer details.

Product privacy

The product page describes local processing and retention controls. Local history is readable SQLite data under the Windows user profile; the app does not encrypt that database. Zero Retention avoids saving new session transcripts but does not remove older history or content in other applications. The website review did not independently audit the public binary.

Open release gaps

The public 0.1.5 installer is unsigned. Code signing, documented access and vendor reviews, tested recovery, and independent assessment remain future work. The diagnostic filtering update is included in this release; the public binary has not been independently audited.

Delivery experience and certification

No independent organization certification or attributed customer outcome is published here. During scoping, request the proposed delivery person’s relevant experience, available credentials and evidence for the work you need. Our illustrative work samples explain output formats; they are not customer results.

Engagement security

Agree systems, access, data handling, vendors, retention, approvals and responsibility in the engagement scope. Backups, recovery targets and support response times require specific commitments and evidence; they are not inferred from this website.

No vulnerability bounty or fixed response-time commitment is advertised.