Security & privacy at Runa

Your conversations.
Your control.

Good work starts with trust. Here's how we protect your meeting context, how it's used, and the choices that stay with you.

No training on your content

Runa and our AI providers do not use your customer content to train models.

Protected throughout

Personal data is encrypted in transit and at rest, with access controls around your information.

Choices that stay yours

Manage retention, sharing, voice profiles, and the apps you connect from Runa's settings.

01 / The conversation

On your device.
Supported by the cloud.

Runa captures microphone and optional computer audio through its desktop app. It doesn't send a bot into your meeting. Cloud services turn that audio into transcripts, notes, and searchable context.

01You capture

Start, pause, and stop from the app.

02Runa processes

Specialist providers transcribe and summarize.

03You decide

Review, share, keep, or delete your meeting.

Let participants know when you're recording and obtain the consent your meeting requires.

02 / AI with boundaries

Your context is for your work.

Runa does not train its own models on customer content. Our cloud, AI, and speech-to-text providers are contractually prohibited from training their models on it, too.

We use providers to deliver the features you ask for, such as transcription, summaries, and answers. We do not sell your personal data or use it for cross-context behavioral advertising.

Read about AI processing ↗
03 / Protection underneath

Care at every layer.

Personal data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256. Stored connector credentials and certain uploaded documents receive additional application-level encryption.

Runa runs on Google Cloud in the United States, with meeting audio stored on Cloudflare R2. Some AI inference may use a provider's global multi-region endpoint.

Our security program includes least-privilege access, multi-factor authentication for administrative access, audit logging, vulnerability management, and backup and recovery practices.

Read our security practices ↗
04 / You stay in charge

Useful memory.
Meaningful controls.

Choose what stays.

Manage audio retention in Settings → Data & privacy, including automatic deletion as short as 24 hours. Delete individual meetings or your account when you need to.

Choose who sees it.

Meeting access follows your sharing settings. A public link makes its contents available to anyone with the link until you revoke it. Organization features can also share people and company context with teammates; review those controls in your workspace.

Choose what connects.

You authorize connected apps and can disconnect them. Email and connected work-tool content are read live to support your requests. Proposed changes are shown for approval; routines you configure can deliver results to destinations you choose.

Explore your privacy choices ↗
The details matter

Clear answers.
No small print.

A practical guide to the questions teams ask us.

Is Runa local-only?

No. Audio is captured on your device and sent to cloud services for transcription. Cloud AI also powers summaries, search, and other features. Runa uses Google Cloud and Cloudflare infrastructure, with specialist speech-to-text providers.

Is customer content used to train models?

No. Runa does not train its own models on customer content, and our cloud, AI, and speech-to-text providers are contractually prohibited from using it to train theirs.

Does Runa keep meeting audio?

Audio retention is controlled in Settings → Data & privacy. The published default is to keep audio until you delete the meeting or account; you can choose automatic deletion as short as 24 hours. See the Privacy Policy for the full retention schedule.

Who can see a shared meeting?

Access follows the meeting's sharing settings. A public share link lets anyone with that link view the meeting and chat with it until you revoke the link. Review sharing settings before sending a link.

Can I delete my data?

You can delete individual meetings or delete your account in Settings → Profile. After account deletion, personal data is deleted or anonymized within 30 days, subject to legal retention and the backup schedule described in the Privacy Policy.

What about voice recognition?

Voice recognition is optional and uses voice profiles to help label speakers. You can delete profiles and control sharing. Where you enroll or name someone else, you are responsible for the required notice and consent. See our Biometric Data Retention & Destruction Schedule.

How do I request security information?

Email admin@joinruna.com for questions, the current subprocessor list, or your team's security review. For vulnerability reports, follow our Vulnerability Disclosure Policy.

Go deeper

Our policies, in the open.

The complete details on how we handle your data and how to report a concern.

This overview summarizes our published policies. The policies contain the full terms, retention details, and exceptions.

Let's talk

Trust is a conversation.

Evaluating Runa for your team? Ask us about your security requirements or request our current subprocessor list.

Contact our team