Browser page tools and OCR process selected files in the browser; desktop private-preview OCR runs from bundled local assets. Account library uploads and stored workflow records are server-side and are covered by the Privacy Policy.
OCR and desktop worker paths impose file, page, pixel, memory, language, time and output bounds, use cancellation, and clean temporary resources. No parser or OCR engine is claimed to be risk-free.
Production multi-party E-sign submission is safe-disabled. Self-signed certificates are for internal use; legally consequential signing requires appropriate independent legal advice and a certificate from a recognised authority.
No public desktop installer, updater or offline activation system exists yet. Never install a desktop build from an unofficial link.