For teams whose counsel said “no cloud recording”
Meeting notes that never upload your audio.
Cannoli listens to your meetings and writes the notes, like the tools you know. The difference is where the work happens: transcription and speaker separation run on your Mac. Audio never leaves the device. Only text does, and only when you ask for AI notes.
Audio stays on the Mac
Apple's on-device speech engine transcribes both sides of the call in real time. There is no recording file and no upload.
Notes the way you already take them
Type rough notes during the meeting. Afterwards Cannoli reads them with the transcript and writes the notes you would have written with perfect recall, in your structure.
Three modes, your choice
Managed (our relay to Anthropic), bring your own Anthropic key, or Local-only where nothing leaves the device at all.
Compliance you can read
A published DPA, a precise data-flow table, a subprocessor list, and a security overview that says what is true today.
What leaves the device, by mode
The same table appears in the security overview and the privacy policy. It is the whole product in five rows.
| Mode | Audio | Transcript text | Metadata to Cannoli | Who can see content |
|---|---|---|---|---|
| Local-only | On device | On device only | Entitlement check (plan, device id) if signed in; nothing if not | None |
| Bring your own key | On device | Device → Anthropic, under your own Anthropic agreement | Entitlement check only | Anthropic (your account) |
| Managed | On device | Device → Cannoli relay (in memory, never stored) → Anthropic | Entitlement and a count of notes jobs | Anthropic (deletes within 30 days, no training), Vercel (relay runtime, no persistence) |
Cannoli and Granola, side by side
Granola's architecture is the market standard: audio to the cloud, notes from OpenAI and Anthropic. Cannoli inverts it. Granola facts from granola.ai/security and granola.ai/pricing, checked 2026-11-14.
| Granola | Cannoli | |
|---|---|---|
| Speech-to-text | Cloud (Deepgram, AssemblyAI) | On your Mac (Apple SpeechAnalyzer) |
| Speaker separation | Cloud | On your Mac (CoreML) |
| Audio leaves your device | Yes, streamed | Never |
| Transcript storage | Granola's cloud | Your Mac only; Cannoli stores none |
| Training on your data | Individuals: on by default, opt-out | Never, contractually |
| Nothing-leaves-the-device mode | No | Yes (Local-only) |
| Use your own AI account | No | Yes (bring your own key) |
| Business plan | $14 / user / month | $10 / user / month |
What we say, and what we do not say
True today
- Audio never leaves your device.
- Transcripts live only on your Mac; Cannoli stores none.
- No one trains models on your data: not Cannoli, and not our AI provider, by contract.
- In Managed mode, text sent for notes is deleted by Anthropic within 30 days.
- A Data Processing Addendum is published and applies to every plan.
Not yet, and we say so
- Zero data retention at our AI provider is not the default. It is true in Local-only mode, and for bring-your-own-key customers whose Anthropic account has it.
- SOC 2: on the roadmap, not started.
- HIPAA Business Associate Agreement: not offered.
- SSO: roadmap.
Details in the security overview.
Over 28% less than Granola, at every tier
Free, Business at $10.00, Enterprise at $25.00 per user per month. Both paid tiers are five-sevenths of Granola's published prices: 28.6% less.
See pricing