solstone

confidential processing

what leaves your device

the text and images that go to a model for processing. when the audio switch is on (its default), your audio recordings for transcription go too.

what doesn't

your journal stays on your computer. voiceprints and speaker profiles are computed on your device and never leave. nothing goes to any third-party AI provider.

audio

when confidential processing is on and the audio switch is on, your journal sends speech for transcription: segments up to five minutes each, prepared by your journal into one standard audio format. the service accepts exactly that format and rejects anything else. it travels only over the channel your journal has verified.

the service turns speech to text in memory on confidential hardware sol pbc operates and returns the transcript to your journal. nothing is written, nothing is kept, no human review, nothing used to train.

if your journal can't verify the service, transcription waits on your device. it never goes anywhere else and never silently falls back.

the "transcribe audio on the service" switch lives in the journal's thinking app, in the confidential lane: on while confidential processing is in use, off any time, taking effect once any transcription already under way finishes.

the model is the same either way: parakeet-tdt-0.6b-v3, the same parakeet generation the solstone app uses on your device. your journal checks the served model's identity. there's no premium tier: nothing is held back for the service.

speech-to-text is served with parakeet-tdt-0.6b-v3, created by NVIDIA, used under CC BY 4.0.

where it goes

a model sol pbc runs itself. no third-party AI provider is in the path.

the hardware

confidential GPUs in Microsoft Azure that sol pbc operates. the hardware boundary keeps the cloud host excluded from what's processed, and the model that runs on it is sol pbc's own. no third-party AI provider is in the path.

what's kept

no content is retained · no human reviews it · nothing is used to train.

the check

your journal must verify the service before anything is sent; if it can't verify, it doesn't send.

your choice

off until you turn it on; turn it off from the journal anytime; nothing is stranded (nothing was kept to strand).

the covenants

the covenants: terms · privacy