← Praesto LogicaCompany · security

Security at Praesto

What we do to protect your work, and what we don't claim. Last updated 6 September 2026.

Your audio stays on your device

Apple's speech recognition turns speech into text on your iPhone, iPad, or Mac. Our servers have no way to receive audio. Only the text arrives. If you turn on speaker support, the app builds a voice profile of your own voice, 128 numbers that describe how your voice sounds, and keeps it only on your device, outside any backup. We never receive it and cannot read it. We never build a profile of anyone else.

Encrypted in transit

Praesto talks to our servers over encrypted connections (TLS).

Your account, defended

Passwords are hashed with Argon2id and never stored readable. Two-factor authentication and passkeys are available on every account, and repeated failed sign-ins lock the account — the lock covers the second factor too. You can see every signed-in device and sign any of them out; changing your password signs out everything else.

Your data is yours alone

Every request that touches your content is checked against your identity — at the route and at the row. Live updates are delivered per account; our servers never broadcast one person's data to another.

AI that doesn't train on you

We don't use your content to train AI models, and our AI provider, Microsoft Azure, is contractually prohibited from training on it. Provider errors never become part of your record.

Deletion is real

Delete your account yourself, in the app. Your content is removed from our live systems right away, and the deletion sweeps the material derived from it — transcripts, flashcards, practice problems, uploaded documents. Backups age out within 35 days.

What we don't claim

Praesto is not SOC 2 audited today. We are preparing for a SOC 2 Type II examination, planned for 2027, and we won't borrow the label before an independent CPA firm has issued the report.

No security program is perfect. If we become aware of a breach affecting your personal information, we will notify you and any required authorities in accordance with applicable law.

Questions or vulnerability reports

Write to [email protected]. We read every report.