Parrot ScribeSecurity Architecture
How Parrot Scribe protects your data at every layer.
Parrot Scribe uses a layered encryption architecture designed to protect your transcripts even if your Mac is compromised.
Encryption at Rest
Every transcript and audio file is encrypted using AES-256-GCM. We don't just encrypt the database; we use per-entity keys for every individual entity, ensuring that even a partial compromise is contained.
Keys in Your Mac's Keychain
Your encryption keys are rooted in your Mac's Keychain, protected by the operating system, and carried by iCloud Keychain, so a replacement Mac or a second Mac on your Apple ID can open your library. We never see your keys, and they are required for every session access.
Free Recovery Key
Every user gets a free 24-word recovery key that restores access to your library on a fresh machine, even without iCloud. Write it down once and store it safely; we never see or store it.
Encryption Hierarchy
We use HKDF (HMAC-based Key Derivation Function) to derive unique, per-session encryption keys from a root key held in your Mac's Keychain. Session keys are only derived in memory when needed.
Cryptographic Deletion
When you delete a session, its unique encryption key is destroyed. Because the data was encrypted with AES-256-GCM, the remaining ciphertext can no longer be read on your Mac.
Privacy by Architecture
We don't just promise privacy; we architect for it. Your data stays on your Mac because the app is designed that way. No cloud transcription and no speech data leaves your device for transcription.