1. Security Philosophy
Security at Brints Group is rooted in minimalist architecture. By building products that store less data and perform work locally or ephemerally, we dramatically minimize the attack surface.
2. Spoken.ai Media Security
- In-Transit Encryption: All video, voice, and data channels in Spoken.ai use DTLS (Datagram Transport Layer Security) and SRTP (Secure Real-time Transport Protocol). Signaling and control traffic are protected with TLS 1.3.
- Ephemeral Audio Processing: Incoming voice streams pass through memory buffers strictly during translation synthesis and are purged immediately after packet transmission. No voice recordings persist on media relays.
- Room Isolation: Meeting rooms operate with cryptographically random session tokens. Participants cannot view or access streams from neighboring meeting rooms.
3. Kainos Desktop Security
- Air-Gapped & Offline Ready: Kainos requires zero external network connections to run services. It contains no analytics backdoors, remote shells, or automatic third-party ad injection.
- Local SQLite Sandbox: Databases are stored in your operating system's standard user data folder, governed by local OS file permissions.
- Local Network NDI: NDI broadcasts are confined to your local subnet; no sermon video or presentation output is ever uploaded to external cloud servers.
4. Vulnerability Disclosure & Bug Reports
We welcome reports from independent security researchers. If you identify a vulnerability in any of our services or applications:
- Please email detailed reproduction steps to support@brintsgroup.xyz with the subject
[Security Vulnerability]. - Allow us reasonable time to investigate and address the vulnerability before public disclosure.
- We do not take legal action against researchers acting in good faith following responsible disclosure practices.