The layers behind the app
Your session audio passes through the scribe's backend, the platform it's hosted on, often a gateway library that routes requests, and finally the AI model provider. Each layer has its own staff, code and attackers.
The gateway layer
On October 21, 2026, LiteLLM, a popular gateway connecting apps to cloud AI models, published a malicious release for about two hours that stole credentials, including AI provider keys.
The hosting layer
The same day, Railway, a platform hosting more than 16 million services, disclosed that an unauthorized party may have accessed customers' encrypted environment variables and obtained some decrypted contents. Railway believes the attack is part of a series targeting platform companies to reach AI inference providers.
Remove the layers
Astralcyte Notes transcribes the session and drafts the note on the clinician's own computer, deletes the temporary audio once the transcript is saved, and keeps everything in an encrypted vault. Nothing is sent to a cloud AI service. There's no backend, gateway or model provider in the path, and the app has no telemetry or analytics.