Privacy
How we handle your PDFs
We’re built for one-off anonymisation with temporary storage and HMAC-authenticated workers. Review detections before applying changes.
Upload & processing
- • Uploads go direct to object storage via presigned URLs.
- • Workers download from storage, process, and upload the output.
- • Worker calls require HMAC signatures with a shared secret.
- • We don’t require accounts for one-off anonymisation.
Retention & deletion
- • Files live in temporary storage with lifecycle rules for expiry.
- • You can delete a job after download; lifecycle cleanup also applies.
- • Metadata about jobs stays minimal (state, keys, timestamps).
Local-only apps
Our macOS and iOS apps run entirely on-device for teams that cannot upload documents. No cloud processing, no subscriptions.
Best-effort anonymisation: always verify the output before distribution.