// Trust & Security Report
Running with Crayons Ltd.
Alfred for macOS - a desktop productivity app with local workflow automation, app launcher, file search, clipboard history, and snippet expansion. Core app is free with optional Powerpack add-on; Alfred Remote for iOS also available.
Certifications held
1
Maturity
Growth
Trains on your data
No
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on alfredapp.com“Alfred 5 for Mac is Developer ID Signed and Notarised. Every update is automatically checked by Apple. This means the application undergoes Apple's security verification process with each update.”
> Show 5 unconfirmed / not-held certifications
source: alfredapp.comno public evidence of SOC 2 certification on alfredapp.com or security pages. Product is a desktop application, not a cloud/SaaS platform, so SOC 2 not applicable.
source: alfredapp.comno public evidence of ISO 27001 certification. Desktop app does not undergo ISO 27001 audits. Relies on Apple's Developer ID signing and notarization.
source: alfredapp.comAlfred does not explicitly claim GDPR compliance. Payment processing via Paddle (GDPR compliant), but Alfred app itself makes no formal GDPR compliance claims. Desktop app with local data storage and minimal external data processing.
source: alfredapp.comNot applicable. Alfred is a productivity app, not a health/medical product. No HIPAA scope or claims.
source: alfredapp.comAlfred does not hold PCI DSS. Payment processing partner Paddle is PCI DSS SAQ A compliant, but Alfred itself does not process or store payment cards.
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Not offered
Data region
Local (default); optional sync via Dropbox/similar user-controlled services
Not an AI product. No training on customer data. Desktop app does not use ML/AI models.
// Security controls
Local-First Data Storage
Preferences and settings stored locally in user's Library folder by default. User data not sent to Alfred or third parties.
alfredapp.comSearch Tracking
No tracking of user searches. Explicitly do not track searches and do not send usage data home.
alfredapp.comInternet Connectivity
Minimal and transparent. Only connects to internet for: license activation (Powerpack), periodic update checks, Alfred Gallery integration, and optional preference syncing.
alfredapp.comWorkflow Security
Workflows on Alfred Gallery are automatically and manually security checked, then notarized and signed using strong cryptography. Community auditing possible due to open-source nature.
alfred.appPayment Processing
Handled by Paddle.com. Alfred does not store payment card data. Paddle is PCI DSS SAQ A and GDPR compliant.
alfredapp.comUpdate Data Encryption
When app checks for updates, data is encrypted and never written to disk. No personal information is sent.
alfred.app// Products & data scope
data: Local only (hotkeys, keywords, text expansion, basic search)
Free tier with core app-launching and file-search features. No data collection or external connectivity required for basic use.
data: Local + optional Dropbox sync for settings
Paid feature add-on enabling workflows, advanced features, themes. License activation requires online connection. Optional settings sync via Dropbox.
data: Local network communication (iPhone/iPad to Mac)
Optional paid companion app. Controls Mac via local network. No cloud sync reported.
// At a glance
Pricing model
Freemium (free core + paid Powerpack add-on). One-time purchase, not subscription.
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Running with Crayons Ltd.'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
alfredapp.com