Security & Proof
What this workspace does with your files, and how to check it without taking our word for it.
Stays in this browser
- File contents, rows, and cell values
- Detected values and alias mappings
- File names and preview data
- Restored AI results
Working data lives in tab memory and is cleared on reset or reload.
What the server can see
- Account email, if you sign in (optional)
- Plan entitlement and payment events
- Allow-listed product events: counts, durations, format buckets — never contents
There is no endpoint for receiving the files you process.
Storage on this device
- Projects & presets
- rule configuration only — never file contents or column values.
- Alias vault
- encrypted with a key derived from your passphrase (PBKDF2 → AES-GCM); unreadable without it, and never sent anywhere.
- Usage counter
- a single number per month, nothing else.
Verify it yourself
- Open your browser's Network panel.
- Process a file from upload through export.
- Confirm no request carries file contents, file names, or detected values.
You can also load the app once, go offline, and run the whole flow without a connection.
Read the full verification guide →Data Alias reduces exposure risk but cannot guarantee detection of every sensitive value. Review the result before sharing it.