Home
privacy · audit
Trust, but verify. Especially us.
The collection agent is open-source so you can read every syscall we make.
What you can audit today
- Swift collection agent — full source (see Source page)
- Local SQLite schema + export tooling
- Network activity: none on Unsealed tier
- Accessibility API usage — window metadata only
Export & review
Export raw and abstracted events as JSON. Compare against on-screen notifications. Report discrepancies to security@getvelvt.com.
Third-party review
Independent security review planned during beta. Findings will be published on this page.