Security

The principle: your data stays with you

The best way to protect data is not to send it. The Eyno apps do the work on your Mac or iPhone: voice recognition, editing your PDFs, your documents, drawings and videos. None of it goes through our servers.

Eyno Vault

• The vault is encrypted on your device, with a key derived from your main password. We don’t know this password and cannot recover it.
• If you turn on iCloud, only the encrypted vault is sent to your private iCloud: Apple cannot read it, and neither can we.
• Unlocking with Touch ID or Face ID goes through your device’s secure chip.
• A recovery kit, to print or keep offline, lets you recover your vault.

Eyno Voice

• Audio never leaves your device. Only the text goes out, and only when you ask for a cleanup or a summary.
• The text travels encrypted (HTTPS) to our server, which passes it to Claude without keeping it.
• The Claude access key stays on our server: the app doesn’t know it.
• No password: you sign in with a link or a 6-digit code, valid for 15 minutes and usable only once. The code locks after 5 attempts.
• Our server only keeps a hash of your sign-in tokens, not the tokens themselves. Your session is stored in your device’s keychain.
• Password fields are never read: when Eyno Voice learns from your corrections, it ignores these fields.

The apps

• The Mac apps are signed by Bloomwise SAS and checked by Apple (notarization) before every release.
• Updates are verified by a signature: a version modified by a third party would be rejected.

Certifications

Eyno does not hold a security certification (SOC 2, ISO 27001). We made a different choice: keep your data on your devices, so we have as little as possible to protect on our side.

Report a vulnerability

If you find a security vulnerability, write to us at support@eyno.app. We will reply quickly and fix it as a priority.