par CosmographicsNo external AI
Detection and replacement run without sending content to a remote AI model.
Security · no external AI
The safest document to share is the one that never left your device.
The online account service is separated from the document engine. Privacy relies on observable technical controls, not a marketing promise.
Local architecture
A clear trust boundary.
Internet-facing features cannot access the document in plain text.
Offline-capable engine
The local engine and its libraries ship with the application, with no CDN dependency.
Accounts separated from files
The service knows your account and licence, not the contents being processed.
Encrypted identity vault
Mappings are encrypted in the browser. The password is never stored.
Verifiable network policy
The processing area applies a security policy that blocks outgoing connections.
Flattened PDF output
Final PDF pages contain no hidden text layer or recoverable annotation.
What we claim — and what we do not.
No serious software can promise zero risk. OCR quality, damaged files, complex graphics and human review remain documented limitations.
Before commercial release
Independent security review, account-isolation tests, vulnerability disclosure and dependency monitoring are required. No certification will be claimed before it is obtained.
Check the result before you share — not after a leak.
Processing starts on your device. The original stays unchanged.