Local processing
Where a tool supports local processing, document bytes stay in browser memory or local browser storage for that workflow rather than being uploaded for routine processing.
Legal & trust
Security is a product boundary, not a badge.
PDFsy separates local document processing, administrative access and operational analytics so sensitive document contents do not need to become administrative telemetry.
Administrative access
The only sign-in enabled in the current release is the private administration login. Active-user checks, role permissions, rate limits and audit events protect that console.
Analytics boundary
Analytics use approved operational fields. Document text, OCR text, filenames, passwords, signatures and raw file contents are outside that analytics contract.
Responsible reporting
Do not access, modify or retain data that is not yours. Stop testing if a security issue could expose another user or document, and report the minimum evidence needed to reproduce the issue safely.