For your IT and security team

One page to forward, written for the reviewer.

If someone has asked you to approve Bolt, this is everything you would otherwise have to extract from us over three emails. It is deliberately short, it states what we do not have as plainly as what we do, and every claim on it links to the page that lets you check it.

1. Who we are, and what Bolt is

Vendor
Sparcle Inc., a Delaware C corporation.
Product
Bolt, a desktop application for macOS, Windows, and Linux.
Security contact
Disclosure policy
One business day to acknowledge, 90-day coordinated disclosure, good-faith safe harbor. Published at /trust/vulnerability-disclosure.
Architecture
Bolt runs entirely on the endpoint. Sparcle operates no service that receives customer content, so there is no vendor cloud in the data path to assess.

2. What leaves the endpoint

The question that decides most reviews. Answered by category rather than with a slogan, because the honest answer is not the word never.

Automatic
An update check against our GitHub release channel, and the update package if the user accepts one. That is the complete list of what Bolt initiates on its own. Block it and Bolt keeps working; it stops offering updates.
Only if a user connects it
Google Workspace or Microsoft 365, over user-consented and revocable OAuth. Traffic goes from the endpoint to that provider directly. It does not transit Sparcle, because there is no Sparcle service in that path.
Only if you configure it
An LLM endpoint. Bolt ships no model and has no default endpoint: it is whichever provider or on-prem server you point it at. Structured PII and secrets are masked before the call leaves the machine.
Only if a user enables it
A one-time download of an open on-device model from Hugging Face, for local visual search, embeddings, or speech to text. It runs on-device afterwards. Ask us for the offline preload path if your policy forbids endpoint fetches.
Never
Sparcle. There is no telemetry endpoint, no usage analytics, and no licence server. The licence is a signed token verified offline against a key compiled into the binary.

You do not have to take this list on faith. Run a network monitor against Bolt on a test machine and compare. Anything that leaves and is not on this list is a finding we want reported.

3. Permissions Bolt asks for

All optional. Bolt runs without any of them, with fewer capabilities.

Permission
What it is used for
If denied
Full Disk Access (macOS)
Content search across folders the user chooses. Reads happen on the endpoint; results are indexed into a local, encrypted store.
Optional. Bolt runs without it, with a smaller search surface.
Accessibility (macOS)
The global hotkey, window management, and the automation Bolt uses to act on the desktop when a user asks it to.
Optional. Without it the hotkey and desktop actions are unavailable.
Screen Recording (macOS)
The screenshot and region-capture tools, invoked by the user.
Optional. Without it, screenshot capture is unavailable.
Microphone
Local speech to text, using an on-device model, only while the user is dictating.
Optional and off by default.

4. Where data is stored, and how it is protected

Encrypted at rest by Bolt
Clipboard history, the local search index, the thumbnail cache, alerts, and the on-device vector indexes are stored in SQLCipher databases. Connector credentials and OAuth tokens are encrypted with AES-256-GCM. Keys are held in the OS keychain and gated by the user's login.
Sealed at rest inside the local database
In the local Postgres instance Bolt runs on the endpoint, the heavy content of memory records is sealed with authenticated encryption. A small queryable surface (subjects, entity names, timestamps) is stored in the clear so local search works without decrypting everything.
Protected by the platform
Everything in the data directory is mode 0600 or 0700 under the user's account. We recommend, and enterprise deployments should enforce, FileVault or BitLocker; that is what closes the lost-or-stolen-device case.
Not stored by us
None of the above exists on any Sparcle system. There is no copy to subpoena, breach, or ask us to delete.

5. Assurance, including what we do not have

Listing the gaps here is deliberate. You would find them anyway, and finding them yourself after we omitted them is worse for both of us.

Item
Status
Detail
Independent security assessment
Passed
Google CASA, performed by an authorized assessment lab against 48 requirements, covering how Bolt handles Google user data. Detail at /trust/independent-assessment.
Code signing, macOS
In place
Apple Developer ID issued to Sparcle Inc., notarized, ticket stapled. Verify with spctl before installing.
Code signing, Windows
In place
SSL.com Extended Validation certificate issued to Sparcle Inc., key held in a cloud HSM.
Release integrity
In place
Every release publishes a minisign-signed SHA-256 manifest, a CycloneDX SBOM, and independent malware-scan lookups keyed to each file's hash.
Third-party penetration test
Targeted Q4 2026
Not yet performed. We will publish the summary. An internal hardening pass is not a substitute and we do not present it as one.
SOC 2
Type I targeted Q4 2026, Type II Q2 2027
Not held today. We do not imply otherwise. Note that a SOC 2 on Sparcle would attest to systems that are not in your data path.
ISO 27001, FedRAMP
Not held
On the roadmap, no committed date.

6. If you decide to deploy it

Managed install
macOS configuration profiles and Windows Group Policy with a supplied ADMX/ADML template. Settings can be pinned so users cannot change them. See /trust/managed-deployment.
Network
Five hostnames on 443 to download, update, and run. Per-vendor allowlist steps for Palo Alto, Zscaler, Cisco Umbrella, Netskope, and Fortinet at /trust/network-allowlist.
Verification
A read-only script that shows every connection Bolt opens on a test machine, classified against the published list, at /trust/prove-it-yourself. We would rather you ran your own monitor.
Questionnaires
CAIQ, SIG, and HECVAT answers are pre-filled at /trust/questionnaire. Send us your own instrument if you would rather we complete it.
Network policy, self-hosted
The Helm chart ships Kubernetes NetworkPolicy definitions, so egress from the deployment is something you read and enforce rather than take on trust. They are in the chart values, including the production and air-gapped variants. Ask and we will point you at the exact files for the version you are evaluating.
Testing the masking on your own data
Do not evaluate PII detection on our examples. Bolt runs on your machine, so paste your own hardest cases into it and watch what happens: international identifiers, free-text names, clinical narrative, proprietary source. Structured PII is masked by the always-on regex floor; free-text names need the model engine switched on, and on some platforms deployed separately. If something you care about is missed, that is the finding we want.
Continuity, if anything happens to us
Most vendors answer this with an escrow clause. We would rather give you the property escrow is trying to buy, already built in. Bolt is self-hosted, its licence is a signed token verified offline against a key compiled into the binary, and nothing contacts Sparcle in order to run. So your deployment keeps working on its own terms, your data is already in your own infrastructure, and Helm or Docker is what your platform team operates every day. That is continuity you can test during a pilot rather than a clause you hope never to invoke. Source-code escrow is not a standard term in our contracts today; if your continuity policy calls for one, raise it during contracting and we will work through it with you.

Questions, or a security instrument you need completed: [email protected]. Send us the review rather than only the questionnaire. If your answer is that Bolt does not clear your bar yet, we would genuinely like to know which line it failed on.