Privacy Pipeline privacy model

This tool is classified as heavy workload and runs in On-device mode. Current status: beta (fully-functional). Release note: Pipeline chains scrub, flatten, EXIF strip, and other operations sequentially.

What this does

• Applies the selected transformation to the document or exported output.
• Keeps processing local in browser when marked On-device.
• Uses monthly local counters for usage quotas.

What this does not protect

• It does not remove names or sensitive content visible in document text or images.
• It does not guarantee legal anonymity or endpoint compromise protection.
• For hybrid tools, privacy depends on explicit cloud opt-in when enabled.
• Pipeline execution is sequential. Total time is the sum of all steps.
• Redaction step requires pre-marked redaction rectangles.
• Some step combinations may increase file size (e.g., flatten after compress).

Safe workflow defaults

• Verify output manually before sharing.
• Use security guidance at /security for higher-risk scenarios.
• Keep original and transformed files separated to avoid accidental leaks.