Security

Security model

Darkroom encrypts workspace databases and imported file copies on your Mac. Encryption is designed to protect those contents if someone copies a locked workspace without being able to unlock it.

Encryption

What encryption does not cover.

Workspace encryption does not cover everything on your Mac or files you take out of the workspace.

Workspace encryption does not prevent access through an unlocked workspace or a compromised operating system.

Darkroom’s app settings, saved workspace locations, and diagnostic logs are not covered by workspace encryption.

Importing a file encrypts the workspace copy. It does not encrypt or remove the original file.

When you export records or save an attachment, Darkroom writes readable files outside workspace encryption.

Network requests

When Darkroom goes online.

Map display and place lookup can contact external services. Place search requests include your search text and the map’s center coordinates. Address lookup requests include the coordinates being looked up.

Darkroom has no AI-processing feature.

Integrity

What Seals and Audit mean.

These features help you review content and activity. Neither proves that a source is true.

How export verification works

Seal

A Seal records digital fingerprints (hashes) of a record’s ID, type, and content. These can help detect changes to those values. Record properties and display settings are outside its scope. A Seal does not prove who created the record, whether its source is true, or when it was captured.

Audit

Audit logs record activity and are encrypted in the workspace. They are not an unchangeable history or proof that the log has not been altered.