Security Policy

Our platform is built on top of modern, secure-by-default infrastructure.

1. 1Hosted on enterprise-grade cloud providers with robust physical and network security.
2. 2All server configurations follow the principle of least privilege.
3. 3Continuous monitoring and automated logging of system events.

We employ strong encryption standards to protect your data both in transit and at rest.

1. 1In Transit: All data transferred between your browser and our servers is encrypted using TLS 1.3.
2. 2At Rest: Any temporarily stored files are encrypted using AES-256.
3. 3No sensitive payment data is stored on our servers.

We understand that your PDFs may contain highly sensitive information. That's why we completely eliminated the server from our architecture.

1. 1100% Browser-based processing: All tools process your files locally on your device's CPU and RAM.
2. 2Zero Uploads: Your files are never transmitted across the internet to any remote server.
3. 3Instant deletion: As soon as you refresh the page or close the tab, all file data is instantly cleared from memory.

Strict access controls are enforced to protect our systems from unauthorized access.

1. 1Multi-Factor Authentication (MFA) is required for all administrative access.
2. 2Access to production systems is restricted to authorized personnel only.
3. 3Regular audits of access logs and permissions.

We proactively identify and mitigate security vulnerabilities to keep our platform safe.

1. 1Automated security scanning is integrated into our deployment pipelines.
2. 2Regular updates and patching of dependencies and underlying infrastructure.
3. 3We welcome security reports from researchers and our users.