Guides · Proctoring, privacy and detection

Is an AI interview copilot safe? What actually leaves your machine

2026 · ~7 min read · OfferPilot AI

Partly, and the honest answer turns on one design decision: where the speech recognition runs. If a copilot transcribes with Whisper on your own hardware, your interviewer's voice never crosses the network. If it transcribes in the cloud, a continuous stream of both voices is arriving on someone else's servers for the length of the call. Either way, text leaves. So do screenshots, on any product that reads a coding problem off your screen, because the character recognition happens server-side.

Three unrelated risks are wearing one word

People type this query meaning at least three different things, and the answers have nothing to do with each other.

  • Data safety. What gets sent, to whom, and how long they keep it. This one is verifiable from your side of the connection, and it is what this page is about.
  • Visibility safety. Whether the thing shows up in a screen share or a recording. That is an operating system question, answered further down.
  • Policy safety. Whether assistance is permitted in the round you are sitting. No software setting changes that answer, and no vendor can hand it to you.

Conflating them is how people end up reassured about the wrong thing. A tool can be perfectly invisible on a screen share and still be shipping every word of your interview to a transcription API.

The data path, hop by hop, for both architectures

Every live copilot performs the same four steps: capture audio, turn it into text, send text plus context to a language model, display the answer. Only step two moves between designs. Here is what that relocation costs you.

What the tool touchesCloud transcription buildOn-device Whisper build
Interviewer's voice, raw audioLeaves. Encoded and streamed to the vendor's speech service continuously while anyone is talkingStays. Decoded into text by a model file sitting on your own disk, using your CPU or GPU
Your own microphoneLeaves, whenever the mic channel is enabledStays, same local path
Transcript textLeavesLeaves. This is the row people miss
Your resume and question bankLeaves, as prompt contextLeaves, as prompt context
Screenshots of a coding problemLeaves, as an image, so OCR can read itLeaves. Local audio does not imply local vision
The drafted answerArrives from a remote modelArrives from a remote model
Keystrokes outside the appNot capturedNot captured
Webcam framesNot capturedNot captured
A list of your open windowsNot capturedNot captured

Read the middle rows before the top ones. The marketing fight in this category is about audio, because audio is the emotive part, but the row that never changes is transcript text. A copilot that drafts a speakable answer in about a second is calling a hosted model, and a hosted model needs the question in writing. Any product promising both a frontier-quality answer and zero egress is describing something that does not currently exist on a laptop.

To be specific about our own build, since a vendor writing this owes you that: OfferPilot AI transcribes on-device with Whisper, so the interviewer's audio stays on your Windows machine, and it answers every question with Grok, DeepSeek and Gemini in parallel, which are remote services, so the text goes out. The screenshot capture that reads a LeetCode problem runs its OCR server-side so that text-only models can read the image. That picture of your screen leaves. Better you read that sentence here than find it in a packet capture.

How to tell which build you installed, in about ten minutes

You do not have to take anyone's word for this, ours included. Run these with a podcast or a recorded talk playing as the audio source.

Cut the network mid-sentence

Start a transcript, then disable Wi-Fi while the speaker keeps talking. If words continue appearing for several more seconds, recognition is happening locally. If the transcript freezes on the exact syllable the connection dropped, it was never yours to begin with.

Watch the upstream, not the downstream

Open Task Manager, go to Performance, click your network adapter, and read the Send figure with nothing else running. Continuous speech pushed to a cloud recognizer holds a sustained upstream floor. A local build shows near-silence between sentences, then a short burst once a finished sentence is sent to the model.

Look for the work

Transcription costs something somewhere. If the process sits near zero CPU through forty minutes of dense speech, the arithmetic is being done on a server. Local Whisper shows up in Task Manager as steady, unglamorous CPU or GPU load for as long as someone is talking.

Find the model file

A local model is a file. Search the install directory and the app data folder for something in the hundreds of megabytes with an extension like .bin, .onnx or .pt. A thin installer with no large weights on disk anywhere cannot be running Whisper on your machine.

Make them answer in writing

Search the privacy policy for audio, retention, subprocessor and training. Then email support and ask three questions: is raw audio transmitted, how long is any transcript retained, and is my data used to train models. Keep the reply. A vendor that will not answer those plainly has answered.

What you give up by keeping audio local

On-device is not free, and pretending otherwise would be its own kind of dishonesty.

  • A model small enough to run in real time on a laptop is not the largest model in existence. Expect more trouble with heavy accents, crosstalk and unusual technical vocabulary than a large server-side recognizer would have.
  • It taxes the same machine already running your video call, your editor and twenty browser tabs. Older hardware feels this immediately.
  • Local inference is generally the reason tools like this ship platform by platform rather than everywhere at once. Ours is Windows 10 and 11 only.

What you buy is narrow, and worth it. The one artifact capable of reproducing an entire confidential conversation, the audio itself, is never in a position to be logged, breached or subpoenaed, because it was never sent anywhere.

The visibility question, answered honestly

Different mechanism, different limits. An overlay excluded from screen capture at the operating system level is absent from Zoom, Teams, Meet, OBS and screenshots while remaining visible on your own monitor. That is enforced by the compositor rather than by a vendor promise, and it applies on every plan including the free tier.

It is also strictly about pixels on a shared display. It does nothing about a webcam watching your eyes, a lockdown browser, a proctor in the room, eye tracking, or a second phone camera pointed at your desk. On a monitored assessment none of this is the right tool, and we are not going to pretend otherwise. What we build for is live conversational help and preparation, not getting past an exam.

When the answer is no, do not install it

Cases where closing the installer is the correct decision.

  • A managed work laptop. Endpoint software inventories installed applications whatever an overlay hides on screen, and an unapproved install is a policy problem before it is anything else.
  • Confidential problem text. Because screenshot OCR is server-side, capturing an NDA-covered take-home, or anything containing your current employer's internal material, sends it somewhere you do not control. Retype the part you need, or skip the feature entirely.
  • A proctored or lockdown-browser exam. Wrong tool, for the reasons stated above.
  • A hard zero-egress requirement. If nothing at all may leave the machine, no cloud-model copilot qualifies. Prepare offline and go in unaided.
  • Anything other than Windows 10 or 11. No macOS build, no Linux build, no mobile app, no browser extension, so the question is moot.

The short version

Ask one question of any product in this category: where does the speech recognition run. On-device with Whisper means the raw audio of your interview stays on your machine, which is the win that actually matters. Text still leaves, prompt context still leaves, and any screenshot read by OCR still leaves. Verify it yourself by pulling the network mid-transcript and watching your upstream, then get the retention answer in writing. Safe is not a badge a vendor hands you, it is a data path you checked.

Related guides

Audio stays local. See the rest of the path.

On-device Whisper transcription, an overlay excluded from screen capture, and 5 free minutes a day with no card required.