Security questionnaire

Forty answers, checked against this branch on 2026-11-03. These describe code and known limits, not an independent audit. Evidence: trust information, providers, terms and DPA draft.

Identity and access

1. Who is the vendor? [to be confirmed: vendor legal name], a one-person business. Contact and address. 2. Are seats devices or people? People; Team has at least 3 people and permits 3 Macs per person. Team terms. 3. What roles exist? Owner, admin and member. Owner/admin manage people; members use their assigned entitlement. Team guide. 4. Is SSO included? Yes: OIDC SSO is in Team ($180/person/year); SCIM and "SSO required" are in Business ($360/person/year). Pricing. 5. Which IdPs work? The implementation accepts public HTTPS OIDC issuers with supported signed ID tokens and a verified email claim. Okta, Entra ID and Google Workspace need live-provider acceptance checks; their names are not a certification. Provider setup and limits. 6. Can SSO lock out the owner? Emailed-code sign-in remains available to an owner even when SSO is required or DNS/IdP is unavailable. Owner recovery. 7. Does domain sign-in allocate seats? A currently verified domain can allocate a seat on first sign-in while capacity remains. Removed-member tombstones prevent automatic re-creation. Verified domains. 8. Can we provision users? SCIM Users supports create, list, retrieve, update, active state and deletion. Groups and username changes are not supported. SCIM setup. 9. What does offboarding do? Removes membership and device seats and rejects subsequent online activation. An offline file cannot be remotely revoked. Offline deployment limits. 10. How are bearer credentials stored? The server stores hashes of device, web and SCIM secrets. Mac credentials use Keychain; a signed licence is not a secret. Credential handling.

Data handling

11. Does the account server receive macros? It does not automatically receive the macro library. User-enabled relay prompts or macros may send their content. Data-flow table. 12. What account data is stored? Email, roles, salted hardware hashes, device names, licences, invoice references and security events, plus rate-limit keys that can contain IP addresses or email. Account storage and retention. 13. Is AI optional? Yes. AIAllowed disables model operations; RelayAllowed separately disables the Switchboard relay. Managed keys. 14. Are prompts retained by Switchboard? Relay code accounts for usage without persisting prompt bodies. Upstream providers have their own retention terms. Provider list. 15. Is model training excluded? No blanket promise is made for every customer-selected provider. Review the provider's applicable API agreement. Provider responsibilities. 16. Does BYOK pass through Switchboard? Direct BYOK requests go from the Mac to the selected provider. Data-flow table. 17. Where does sync data go? Optional library sync uses the customer's private Apple CloudKit database. It is not the account database. Sync recipient and control. 18. Can traces contain personal data? Yes, including step inputs and outputs. Review local audit exports before disclosure. Export warning. 19. How long are traces retained? Defaults are 30 days for successes and at least 90 for failures, also subject to count and size limits. Retention limits. 20. Is account history automatically deleted? Not currently. Deletion needs operator handling; seat removal is not account-data deletion. Deletion status.

Encryption and infrastructure

21. Is transport encrypted? Public account/OIDC deployment requires HTTPS. The local development HTTP server is not suitable for public exposure. Transport limits. 22. Are licences protected against editing? Ed25519 signatures are verified on the Mac. Editing the signed payload invalidates the signature. Licence verification. 23. Are disks encrypted? Production host disk-encryption status has not been verified. Do not infer it from use of TLS. Infrastructure gates. 24. How are OIDC client secrets protected? They are encrypted with a Fernet key derived from the server's authentication pepper. Protect and back up that pepper separately. Account secret storage. 25. Are OIDC claims checked? Signature, supported algorithm, issuer, audience, authorized party where needed, nonce, times and verified email are checked. Sign-in requirements. 26. Can discovery fetch private URLs? Production discovery requires public HTTPS addresses, disables redirects and pins the checked address for the connection. Provider transport. 27. Is a hosting region guaranteed? No. Actual host, SMTP provider and transfer safeguards must be confirmed before business publication. Unconfirmed providers. 28. Which companies process data? Paddle, the optional relay provider and relevant Apple services; customer-directed providers are distinguished in the provider list.

Operations and assurance

29. Do you have SOC 2? No. Signed licences, release gates, policy checks and disclosed limitations are available for review instead. Assurance limits. 30. Do you have ISO 27001? No. Assurance limits. 31. Has an independent penetration test been performed? No report is available. Tests in the repository are not an independent penetration test. Assurance limits. 32. Do you carry cyber insurance? No certificate is available. Assurance limits. 33. Are backups and restores tested? Production nightly backup and restore evidence is not yet verified. This is a launch gate. Infrastructure gates. 34. Is there a guaranteed RTO or RPO? No contractual restoration objective or uptime SLA is offered by these drafts. Service terms. 35. What support response is promised? The target is one business day for teams, two for individuals; resolution time is not guaranteed. Support terms. 36. How do we report vulnerabilities? Email [to be confirmed: contact email]. The disclosure policy targets acknowledgement in two business days and a fix or mitigation within 90 days. Disclosure policy. 37. Is there a bounty? No paid bounty. Credit is available on request for good-faith reports. Disclosure policy. 38. Can logs be exported? Local retained runs and owner/admin server team events export as JSONL. They are not cryptographically tamper-proof. Export instructions and samples. 39. Is a DPA available? A review draft is available. Confirm host/mail identities and transfer terms before countersigning a published agreement. DPA draft. 40. What happens if the company stops? Previously issued Standard/Founder licences verify offline within their rules. Subscription and offline team files still expire; there is no forever-Team guarantee. Continuity limits.