Security at Hushscript
This page says what the product actually does: what is uploaded, what is stored, what is encrypted, what is deleted and when, who can see what, and what we will sign. It claims no certification we do not hold.
What is uploaded, and what never is
Video never leaves your device. The compatible audio track is extracted in the browser, and only that prepared audio is uploaded for speech recognition. Before sign-in, the public preview sends only a clip of up to 5 minutes, never the full file.
There is no meeting bot, no calendar access, and no background recording. The only audio Hushscript ever sees is a recording you chose to submit.
What is deleted, and when
The transcription-audio copy is deleted the moment the transcript is saved: not on a schedule, not behind a setting. The speech engine processes audio with zero retention, and its transcript copy is deleted right after the result is finalized.
Deleting a transcript through its dedicated flow returns a downloadable receipt recording what was removed and when. Scheduled retention sweeps store the same receipt on the deletion record.
What is encrypted
Stored transcript content, titles, speaker metadata, translations, and Insights artifacts are encrypted at rest. A storage-level leak would expose ciphertext, not client conversations.
Where processing happens
EU, EEA, Swiss, and UK audio is processed in the EU. A Teams workspace is pinned to one data region when it is created, and its members' accounts live in that region.
Hushscript is operated by LW Agency Limited, Hong Kong.
Who can see what
No human transcription workforce handles customer files, and recordings are never used to train models.
In a Teams workspace, admins manage seats, billing, retention policy, and the shared pool, and the audit log shows usage: who spent how many minutes, never transcript content. Admins cannot read members' transcripts; that permission does not exist.
Retention under your control
Keep transcripts until you delete them, or auto-delete after 7, 30, 90, or 365 days, with a per-transcript override for matters that need their own lifecycle. Private mode goes further: speech recognition runs, a password-protected archive comes back, and no transcript is saved to the account at all.
A Teams workspace adds a retention default for every member and an optional enforced maximum. The maximum applies from the moment it is set.
What we will sign
A data processing agreement with standard contractual clauses, and a confidentiality addendum for firms that need one. The subprocessor list is published and kept current.
Hushscript does not today hold SOC 2, ISO 27001, or similar certifications, and does not claim them. If that changes, this page will say so.
Report a security issue
Write to support@hushscript.com. A human reads it the same business day, and genuine reports are acted on with priority over everything else.