Deployment
Your infrastructure, your rules
- On-premise servers, private cloud (AWS VPC, Azure VNet, GCP VPC), or hybrid deployments
- Air-gap compatible, works without internet connectivity in isolated networks
- Desktop apps (macOS now, Windows/Linux in Q2 2026), web interface, mobile, or bot integration
- Bring your own models, swap STT and LLM providers anytime (local or cloud)
- No vendor lock-in, open source architecture you can fork if needed
Security
Passes the security review
- Self-hosted deployments, private networking, and traffic paths your team can inspect
- Encrypted transport for network requests and explicit control over which providers are involved
- SSO integration (SAML, OAuth) with multi-factor authentication
- Network traffic you can inspect yourself, no black box processing
- Open source codebase your security team can audit
Compliance
Built for regulated environments
- HIPAA-compatible deployment options for healthcare environments
- Data residency controls, keep recordings in your geography (EU, US, custom regions)
- Multiple consent workflows: voice-activated, pre-meeting links, explicit prompts
- Configurable retention policies with automated deletion schedules
- Comprehensive audit logging for compliance reporting
- SOC 2 Type II certification in progress
Access
Centralized oversight, granular control
- Role-based access control (admin, user, viewer) with custom role creation
- Team workspaces with isolated data boundaries
- Directory service integration (LDAP, Active Directory) for user provisioning
- Organization-wide policy enforcement (recording defaults, AI features, retention)
- Individual note-level permissions for sensitive meetings
- Access audit logs showing who viewed what and when
Vendor Promises vs. Verifiable Architecture
What Do You Choose?
Frequently Asked Questions
Q: How can I boost my team's productivity while ensuring data sovereignty?
A: Deploy Char on your own infrastructure to maintain complete control over your data. Your meeting recordings and transcripts never leave your network, ensuring full compliance with data residency requirements.
Q: Is there a way to ensure consents are properly granted and managed?
A: Char provides multiple consent options including voice-activated consent during meetings, pre-meeting consent links, and explicit consent prompts when joining. We prioritize transparency and respect in every recording scenario.
Q: How secure is the platform?
A: We focus on controls you can verify today: self-hosting options, auditable network paths, provider choice, and SSO or MFA support. Additional encryption work is on the roadmap, but we avoid presenting roadmap items as already shipped controls.
Q: How do you manage access control?
A: Administrators have granular control over permissions, team workspaces, and user access. Set role-based permissions, manage team structures, and maintain centralized oversight across your entire organization.
Q: What deployment options are available?
A: Char adapts to your workflow with multiple form factors: native desktop applications (currently available for macOS), web interface, mobile apps, or even bot integration for remote meeting capture. Choose the deployment method that works best for your team.