MMeetglow
Product documentation
ProductQuick start
TRUST MODEL

Security & privacy

Understand what crosses the network, what stays local and where capabilities are deliberately denied.

Bridge transport

Bonjour discovers the Bridge and a manual endpoint provides recovery on managed networks. A 128-bit device-only Keychain secret authenticates challenge-bound ChaCha20-Poly1305 messages with correlation, size limits and replay rejection, without requiring the display and Mac clocks to agree.

Local-first resilience

Displays persist an atomic, versioned snapshot envelope. Provider failures can reuse a still-readable source while marking it stale; corrupt or future schemas are rejected rather than guessed.

Data minimization

  • No arbitrary downloaded code.
  • No credentials in display snapshots.
  • Sensitive meeting subjects are redacted before cache persistence.
  • CloudKit uses the private database for bounded configuration only.

Fleet gate

Good to know

The MVP pairing secret is Bridge-wide. Per-display identities, revocation and enterprise fleet authorization are required before large production deployment.