Voicebox is one of the cleanest data privacy stories in this review set — voice data never leaves your machine — and the changelog shows genuine security engineering (CORS hardening, localhost-only Docker defaults, SHA-256 checksums, non-root runtime), but it has no Privacy Policy, no Terms of Service, and no legal entity behind it, which limits its enterprise readiness.
Score Summary
Claim Accuracy4/5
Data & Privacy5/5
Security Posture4/5
Transparency3/5
Key Findings
›Voice data, models, and generated audio stay entirely on the user's machine by default. The SECURITY.md explicitly confirms this. Remote mode — which exposes the server over the network — is an explicit opt-in requiring user-managed firewall or VPN configuration — source: https://github.com/jamiepine/voicebox/blob/main/SECURITY.md, https://docs.voicebox.sh/overview/remote-mode.
›The v0.2.1 changelog documents a CORS hardening fix: the FastAPI backend previously used a wildcard CORS allowlist (*), which was replaced with an explicit allowlist of local origins. The Docker deployment binds to localhost only by default. The Docker image uses a non-root runtime. Binary releases include SHA-256 checksums for verification — source: https://github.com/jamiepine/voicebox/releases.
›No Privacy Policy, Terms of Service, or legal entity is associated with the Voicebox product. Jamie Pine is associated with Spacedrive Technology Inc. for Spacedrive, but Voicebox is a personal repository — source: https://github.com/jamiepine/voicebox.
›The FastAPI REST API runs on port 17493 and is accessible to any process on the local machine by default (localhost only). Users who enable remote mode or modify the bind address expose all API endpoints — including voice profile management, generation, and audio files — to the network without authentication by default — source: https://docs.voicebox.sh/overview/remote-mode.
›Jamie Pine's real name, personal website (jamiepine.com), X profile (@jamiepine), and LinkedIn (ca.linkedin.com/in/jamiepine) are publicly disclosed. He is the CEO of Spacedrive and a software engineer and UI designer based in Vancouver, BC — source: https://github.com/jamiepine, https://x.com/jamiepine.