Security Architecture & Manifesto
Core tools run locally in your browser using WebAssembly and HTML5 Canvas. Heavy PDF compression tasks utilize isolated ephemeral server pipelines (Ghostscript/qpdf) with immediate cleanup. Authenticated users can optionally save files to a secure cloud vault backed by Supabase Postgres RLS.
Client-first execution•Ephemeral Ghostscript/qpdf acceleration•Auth-gated cloud vault
WebAssembly Core
Client-side tools execute directly in browser memory via WASM and Canvas threads for zero-exposure standard document processing.
Ephemeral Server Pipelines
When heavy compression is selected, Ghostscript and qpdf process files on temporary server buffers that are wiped immediately upon stream completion.
Secure Cloud Vault
Optional cloud storage requires email authentication and is protected by Supabase Postgres Row Level Security (RLS) so only you access your saved files.