🔒 Privacy Architecture & Security Whitepaper

Privacy Policy & Architecture

AM Amaad Mazari Lead Security Architect Effective Date: August 2026

Zero-Knowledge Architecture Summary

  • 0 Bytes Server Data Transit: We do not operate file upload servers. Your files never touch our network.
  • Local Browser Memory Sandbox: All parsing, text extraction, OCR, and vector PDF compilation happen inside your browser's private memory.
  • No Cookies or User Tracking: We do not track your identity or sell your data.

1. The Fundamental Architectural Difference

Traditional PDF utilities require sending your files to a backend web server over HTTPS. At that point, you must trust the service provider's privacy policy, their retention period, their employee access controls, and their vulnerability to external cyberattacks.

LocalDoc operates on a Zero-Trust Client-Side Architecture. Instead of sending your document to our code, our code is sent once to your browser. Your local CPU and GPU execute all computations locally.

2. How to Verify Zero-Upload Privacy Yourself

We believe in verifiable security rather than blind trust. You can independently confirm that LocalDoc never transmits your files by following these steps:

  1. Open LocalDoc in Google Chrome, Microsoft Edge, Mozilla Firefox, or Apple Safari.
  2. Press F12 or right-click anywhere on the page and select Inspect to open Developer Tools.
  3. Click on the Network tab.
  4. Drag and drop a PDF into any tool (e.g., Compress PDF or PDF to Word) and click Process.
  5. Observe the Network table: Zero POST requests with file payloads are dispatched. All processing occurs in memory without an internet connection.

3. GDPR, CCPA & HIPAA Compliance

Because LocalDoc never receives, processes, or stores your personal data or document binaries on any server, using LocalDoc complies inherently with GDPR, CCPA, and HIPAA privacy rules without requiring complex data processing agreements (DPAs).

4. Contact the Security Team

If you have any technical inquiries regarding our client-side WebAssembly implementation or wish to report a security disclosure, please contact us via our Contact Form.