Security and privacy

Documents stay in your hands.

Clear boundaries for what stays local, what supports access, and what still needs your review.

Stays on this device

Original and exported documents, extracted text, findings, and mappings do not enter our servers.

Used only for access

Email, plan, and credit status support purchases and recovery. Payment data is handled by Stripe.

Verified with limits

We recheck searchable output but do not claim every possible identifier has been found.

Offline Ready is real, not a slogan

The workspace shows Preparing private workspace… while it downloads and caches the interface, parser, and language resources. Only after that completes does it show Offline Ready. You can then disconnect to verify that core processing still runs on this device. Account, payment, entitlement sync, and first-time OCR or language downloads are not part of the offline guarantee.

What verification covers

After export, the tool re-parses the new file and checks that accepted original values are not present in searchable content. A result is marked Verified only when no accepted value is found in retrievable text. Items it cannot automatically verify, such as images or complex objects, are routed to Needs review with a clear warning rather than a false sense of safety.

What we do not claim

  • We do not claim a document is completely free of identifiers.
  • Low-confidence detections are flagged for your review, not hidden.
  • You remain responsible for checking the exported copy before sharing it.

Workspace isolation

The workspace loads no advertising, session recording, heatmap, chat, or third-party marketing scripts. It uses a strict content security policy, and error logs never record document content.

The workspace prepares documents locally. It is not a substitute for legal or compliance review of the underlying document.

See it for yourself

Open a document and watch processing stay on this device.

Test the local workflow