By default: nothing

Opening, reading, editing, saving, exporting to PDF or Word, importing a licence: none of these will make a network connection. The app will not resolve a hostname until you opt in to the one optional feature below.

1. Update check

Planned. Optional, and off until you turn it on.

Endpoint: https://updates.asitis.app/{target}/{arch}/{current_version} (not live yet)
When: Only after you tick "Check for updates" on first run or in Settings. Then at most once a day while the app is open, and when you choose "Check now".
Sent: Your platform (darwin or windows), CPU architecture, and the app version you are running. Those three values are in the URL path. No identifier, no cookie, no file information.
Received: A JSON document with the newest version, release notes and a download URL. Downloads will come from the same host or from GitHub Releases, and every update will be signature-checked before it installs.
What we can learn: An anonymous daily count of checks by version and platform. Nothing about you or your files.
Turn off: Settings, Updates, untick "Check for updates". The app then never contacts this host.

2. Licence resend page

Planned. A web page you open in your browser, not a call the app makes.

URL: https://asitis.app/licence/resend (not live yet)
When: Only when you click "Lost your licence?" in the licence sheet. The app opens the page in your default browser; the app itself makes no request.
Sent: The email address you type into the page, from your browser. The page will ask a Cloudflare Worker to email the licence file again; rate limited by email and IP address.
Received: An email with your licence file attached.

Nothing else

No licence activation call. No telemetry. No crash upload. No font or asset downloads. No "phone home" on launch. Links inside your documents open in your browser, not in the app. Remote images in a document are blocked until you allow them, and then your browser engine fetches them, which is visible in the same monitor.

How to verify

Once the app ships:

macOS: Little Snitch or LuLu, rule "deny all" for AsItIs. Open a report, edit, save, export. No prompt should appear.
Windows: Windows Defender Firewall with Advanced Security, outbound rule blocking asitis.exe, audit logging on. Repeat the same steps and read the log.
Any OS: unplug the network. Everything works, including Pro.

The website (not the app)

asitis.app, the site you are reading, loads from Cloudflare and counts page views with Cloudflare Web Analytics: each page loads Cloudflare's script from static.cloudflareinsights.com, which sends a report to cloudflareinsights.com with the page address, the referring page, your browser and device type and how fast the page loaded. No cookies, nothing stored in your browser, no tracking across sites. The waitlist form posts your email to our own endpoint on asitis.app, stored in Cloudflare D1 with the time you consented, after a Cloudflare Turnstile spam check; no IP address is stored. None of this involves the desktop app. Details in the privacy policy.

Network activity: the complete list.