Typeless is a cloud dictation service from a Palo Alto company, and its published position is strict about retention: it says your voice audio is not stored, dictation is not used for training "by us or any third party", and history text stays on your device unless you turn on cloud sync. It says it is ISO 27001 certified, GDPR compliant and HIPAA compliant. The fact to weigh is architectural: Typeless states that "Transcription is performed on the cloud", together with context from the app you are using. So the question is whether your information may be processed by a cloud service at all.
Publisher note: SuprFlow publishes this guide and is one of the products discussed. Competitor details come from each company's own pages, checked on 1 October 2026. Prices and features change; confirm before you buy.
This page reports what Typeless's own pages say. It is not a security audit, and we have not tested Typeless's controls or network traffic.
What do Typeless's own pages say?
As of 1 October 2026.
| Question | What Typeless states | Source |
|---|---|---|
| Who makes it? | "Simply CA LLC, Palo Alto, California, United States." The terms are governed by California law. | About, Terms |
| Where is speech turned into text? | "Transcription is performed on the cloud to ensure the highest accuracy and low-latency performance." | Data Controls |
| What else is sent? | "Limited contextual information, such as the application you're using and relevant text within it." Audio and context are "immediately discarded once the result is returned to your device". | Data Controls, Privacy policy |
| Who else processes it? | "Leading LLM providers (such as OpenAI)", under "zero retention" agreements. A subprocessor list is linked from the site footer. | Data Controls |
| Where is it processed? | Data, including personal data, is transferred to "the United States and process[ed] there". | Privacy policy |
| What is stored? | No voice audio. History text stays on the device unless you enable History Cloud Sync; turning sync off deletes that text from Typeless's cloud. Typeless "only retains anonymous usage statistics, such as total word count". | Data Controls |
| Is your data used for training? | "Dictation data is not used for model training by us or any third party." The exception is feedback you choose to send, which may include pseudonymized text or corrections "with your explicit consent". | Data Controls |
| Audits and certifications | "Typeless is ISO 27001 certified, GDPR compliant, and HIPAA compliant." The pricing chart lists a BAA and, on Enterprise, enforced HIPAA controls. | Homepage, Pricing |
| Encryption | "Industry-standard encryption for all data, both in transit and at rest." | Data Controls |
| Platforms | macOS, Windows, Linux, iOS and Android. | Homepage |
| Is the source public? | The pages we read do not describe the app as open source or link to its source code. | Homepage |
The Data Controls page and the privacy policy were both last updated 25 August 2026.
Is Typeless local or offline?
No. Typeless states that transcription runs in the cloud, and the pages we read do not describe an offline mode. Without a connection, expect dictation not to work. If you need speech recognised on the Mac itself, you need a different kind of app.
What do Typeless's pages not say?
- What the audits cover. The homepage says Typeless is ISO 27001 certified. Its Trust Center, at trust.typeless.com, asked for a browser check and did not load for us, so we could not read the certificate scope, the issuing body or the subprocessor list. Ask Typeless for them.
- Which plan includes the BAA. The pricing chart lists a BAA row; read the chart or ask sales before relying on it for health information.
- Which providers do the speech recognition. The Data Controls page names OpenAI as an example of an LLM provider. It does not say which provider transcribes audio.
- How much on-screen text is "relevant". Context processing is described in general terms, and the pages we read do not describe a setting for turning it off.
How can you check for yourself?
- Download from Typeless's site. Its Mac setup guide says to use the Downloads page, open Typeless.dmg and drag it to Applications. How to check a signed Mac release shows how to see who signed it.
- Review permissions. The same guide lists Accessibility ("so Typeless can paste text into any text field") and Microphone, under System Settings → Privacy & Security.
- Set history options. Leave History Cloud Sync off if you do not want history text in Typeless's cloud. Typeless's history guide says history stays on your device, can include the original audio, and can be kept from Forever down to 24 hours or Never under Keep history.
- Do not paste client content into feedback. Feedback is the one path Typeless says may retain diagnostic information.
- Run a network test with fictional text. Dictate "Send contract 8820 to Mateo Lindqvist by the 21st, fee 5,600 dollars" online, then with Wi-Fi off. Expect the offline attempt to fail, which is the documented design.
- Ask your firm whether US cloud processing with context from the active app is permitted for the material you plan to dictate.
When is Typeless a reasonable choice, and when does something else fit better?
Typeless is a reasonable choice when your work permits a cloud vendor, you value a no-storage, no-training position that needs no settings changes, and you want one tool on Mac, Windows, Linux, iOS and Android. Enterprise adds SSO, SCIM and audit logs.
It fits less well when a rule says audio must not leave the device, when you need dictation with no internet, or when your reviewer needs a SOC 2 report, which we did not find listed on Typeless's public pages.
For those cases, look at apps that run speech recognition on the Mac. SuprFlow is one: it uses a downloaded WhisperKit model on the Mac, and its Default formatting is local cleanup of punctuation, capitalization and numbers. Its optional Cloud API formatting sends transcript text, not audio, to a provider you configure. It still uses the network for licence checks, model downloads, updates and usage telemetry. It is proprietary, Mac-only (Apple Silicon, macOS 14 or later), costs $125 once with no free tier, and has no ISO certificate, BAA, team features, translation or apps for other platforms. Where does my dictation go? traces SuprFlow's data path.
Questions people ask
Is the Typeless app safe?
Typeless documents zero audio retention, no training on dictation, encryption in transit and at rest, and ISO 27001 certification. Your audio and some on-screen context are processed in its cloud. We have not audited it.
Is Typeless legit?
Yes. It is operated by Simply CA LLC in Palo Alto, publishes a privacy policy, terms, a DPA and data controls, and sells through its own site and app stores.
Is Typeless open source?
Its pages do not describe it as open source, and we found no link to its source code.
Does Typeless store my voice?
Typeless says no: "Your voice audio is not stored." History text stays on your device unless you turn on History Cloud Sync.
Related guides
- Typeless pricing
- Is Typeless worth it?
- Typeless alternatives for Mac
- SuprFlow vs Typeless
- Wispr Flow vs Typeless
- What a no-training agreement should cover