Instead of inviting external bots to join your virtual meetings, Samurai Scribe records your system audio and microphone feeds directly at the OS layer. This allows you to capture Zoom, Google Meet, Teams, or Slack calls privately without displaying a bot in the call. When you first launch the app, macOS or Windows will ask you to grant permission to record audio. Windows needs nothing beyond that; macOS asks for a little more.
What it asks for today. To hear the other people on a call, the app needs to capture the audio your computer is playing. On macOS that currently means granting Screen Recording, which is broader than what we actually use — Samurai Scribe only ever reads the audio stream, and never captures your screen, your camera, or any video. macOS has since added a narrower "System Audio Recording Only" permission, and we are moving to it so the app stops asking for more than it needs. On Windows, capturing desktop audio needs no special permission at all.
What that permission can and can't lead to. Permission to hear your audio is only a risk if there is somewhere for that audio to go. There isn't. Your audio is never transmitted anywhere unless you choose to contribute a recording, and with local models (the default) nothing transcribed or summarized from it is either — there is no account, no sync, and no cloud processing of ours to send it to. Every network request the app is capable of making is written down in our network disclosure, and it's meant to be verified rather than believed: point Little Snitch or Wireshark at the app, record a full meeting, and you should see exactly that list and nothing else.
On third parties. The macOS build is signed with our Developer ID and notarized by Apple, so the copy you download is the one we built, and macOS refuses to run it if anything has altered it. The Windows installer, and the programs it installs, are signed through Microsoft’s Artifact Signing service under an identity Microsoft verified, so Windows can confirm the copy you run is the one we built, and a modified file no longer shows a valid signature. The heavy lifting is done by well-known open-source components — whisper.cpp for transcription, ONNX Runtime for speaker detection, ffmpeg for audio — and these are compiled into the app rather than fetched at runtime, so nothing can be swapped underneath you after you install. The one exception is the optional video downloader (yt-dlp, with Deno), which the app fetches from its official releases only when you install it or import a link, checks (yt-dlp against its maintainers’ signed checksums, Deno against a hash built into the app), and runs as a separate program.