Recordings get a separate AES-256 encryption key per file, stored in macOS Keychain. One-tap shred deletes the key + audio. Never auto-shared.
Whisper pipeline integration pending. Items will auto-appear in Concierge after transcription.