Partly, and the honest answer turns on one design decision: where the speech recognition runs. If a copilot transcribes with Whisper on your own hardware, your interviewer's voice never crosses the network. If it transcribes in the cloud, a continuous stream of both voices is arriving on someone else's servers for the length of the call. Either way, text leaves. So do screenshots, on any product that reads a coding problem off your screen, because the character recognition happens server-side.
Three unrelated risks are wearing one word
People type this query meaning at least three different things, and the answers have nothing to do with each other.
- Data safety. What gets sent, to whom, and how long they keep it. This one is verifiable from your side of the connection, and it is what this page is about.
- Visibility safety. Whether the thing shows up in a screen share or a recording. That is an operating system question, answered further down.
- Policy safety. Whether assistance is permitted in the round you are sitting. No software setting changes that answer, and no vendor can hand it to you.
Conflating them is how people end up reassured about the wrong thing. A tool can be perfectly invisible on a screen share and still be shipping every word of your interview to a transcription API.
The data path, hop by hop, for both architectures
Every live copilot performs the same four steps: capture audio, turn it into text, send text plus context to a language model, display the answer. Only step two moves between designs. Here is what that relocation costs you.
| What the tool touches | Cloud transcription build | On-device Whisper build |
|---|---|---|
| Interviewer's voice, raw audio | Leaves. Encoded and streamed to the vendor's speech service continuously while anyone is talking | Stays. Decoded into text by a model file sitting on your own disk, using your CPU or GPU |
| Your own microphone | Leaves, whenever the mic channel is enabled | Stays, same local path |
| Transcript text | Leaves | Leaves. This is the row people miss |
| Your resume and question bank | Leaves, as prompt context | Leaves, as prompt context |
| Screenshots of a coding problem | Leaves, as an image, so OCR can read it | Leaves. Local audio does not imply local vision |
| The drafted answer | Arrives from a remote model | Arrives from a remote model |
| Keystrokes outside the app | Not captured | Not captured |
| Webcam frames | Not captured | Not captured |
| A list of your open windows | Not captured | Not captured |
Read the middle rows before the top ones. The marketing fight in this category is about audio, because audio is the emotive part, but the row that never changes is transcript text. A copilot that drafts a speakable answer in about a second is calling a hosted model, and a hosted model needs the question in writing. Any product promising both a frontier-quality answer and zero egress is describing something that does not currently exist on a laptop.
To be specific about our own build, since a vendor writing this owes you that: OfferPilot AI transcribes on-device with Whisper, so the interviewer's audio stays on your Windows machine, and it answers every question with Grok, DeepSeek and Gemini in parallel, which are remote services, so the text goes out. The screenshot capture that reads a LeetCode problem runs its OCR server-side so that text-only models can read the image. That picture of your screen leaves. Better you read that sentence here than find it in a packet capture.
How to tell which build you installed, in about ten minutes
You do not have to take anyone's word for this, ours included. Run these with a podcast or a recorded talk playing as the audio source.
Cut the network mid-sentence
Start a transcript, then disable Wi-Fi while the speaker keeps talking. If words continue appearing for several more seconds, recognition is happening locally. If the transcript freezes on the exact syllable the connection dropped, it was never yours to begin with.
Watch the upstream, not the downstream
Open Task Manager, go to Performance, click your network adapter, and read the Send figure with nothing else running. Continuous speech pushed to a cloud recognizer holds a sustained upstream floor. A local build shows near-silence between sentences, then a short burst once a finished sentence is sent to the model.
Look for the work
Transcription costs something somewhere. If the process sits near zero CPU through forty minutes of dense speech, the arithmetic is being done on a server. Local Whisper shows up in Task Manager as steady, unglamorous CPU or GPU load for as long as someone is talking.
Find the model file
A local model is a file. Search the install directory and the app data folder for something in the hundreds of megabytes with an extension like .bin, .onnx or .pt. A thin installer with no large weights on disk anywhere cannot be running Whisper on your machine.
Make them answer in writing
Search the privacy policy for audio, retention, subprocessor and training. Then email support and ask three questions: is raw audio transmitted, how long is any transcript retained, and is my data used to train models. Keep the reply. A vendor that will not answer those plainly has answered.
What you give up by keeping audio local
On-device is not free, and pretending otherwise would be its own kind of dishonesty.
- A model small enough to run in real time on a laptop is not the largest model in existence. Expect more trouble with heavy accents, crosstalk and unusual technical vocabulary than a large server-side recognizer would have.
- It taxes the same machine already running your video call, your editor and twenty browser tabs. Older hardware feels this immediately.
- Local inference is generally the reason tools like this ship platform by platform rather than everywhere at once. Ours is Windows 10 and 11 only.
What you buy is narrow, and worth it. The one artifact capable of reproducing an entire confidential conversation, the audio itself, is never in a position to be logged, breached or subpoenaed, because it was never sent anywhere.
The visibility question, answered honestly
Different mechanism, different limits. An overlay excluded from screen capture at the operating system level is absent from Zoom, Teams, Meet, OBS and screenshots while remaining visible on your own monitor. That is enforced by the compositor rather than by a vendor promise, and it applies on every plan including the free tier.
It is also strictly about pixels on a shared display. It does nothing about a webcam watching your eyes, a lockdown browser, a proctor in the room, eye tracking, or a second phone camera pointed at your desk. On a monitored assessment none of this is the right tool, and we are not going to pretend otherwise. What we build for is live conversational help and preparation, not getting past an exam.
When the answer is no, do not install it
Cases where closing the installer is the correct decision.
- A managed work laptop. Endpoint software inventories installed applications whatever an overlay hides on screen, and an unapproved install is a policy problem before it is anything else.
- Confidential problem text. Because screenshot OCR is server-side, capturing an NDA-covered take-home, or anything containing your current employer's internal material, sends it somewhere you do not control. Retype the part you need, or skip the feature entirely.
- A proctored or lockdown-browser exam. Wrong tool, for the reasons stated above.
- A hard zero-egress requirement. If nothing at all may leave the machine, no cloud-model copilot qualifies. Prepare offline and go in unaided.
- Anything other than Windows 10 or 11. No macOS build, no Linux build, no mobile app, no browser extension, so the question is moot.
The short version
Ask one question of any product in this category: where does the speech recognition run. On-device with Whisper means the raw audio of your interview stays on your machine, which is the win that actually matters. Text still leaves, prompt context still leaves, and any screenshot read by OCR still leaves. Verify it yourself by pulling the network mid-transcript and watching your upstream, then get the retention answer in writing. Safe is not a badge a vendor hands you, it is a data path you checked.
Related guides
- Does HireVue Record Your Screen or Just Your Camera and Mic?
- Is a Karat Interview Recorded? Who Watches the Video and When
- Which Coding Assessment Platforms Are Proctored? 7 Compared
- What Respondus LockDown Browser Can Actually See, and Cannot
- Can a Zoom Host See If You Switch Tabs? The Three Signals