# Papryx Desktop - Comprehensive LLM Knowledge Base & Specification

> Papryx Desktop is an air-gapped, privacy-focused PDF editor and Image Studio for Windows and macOS. It executes 100% of document editing, format conversion, and OCR on-device with Zero Document Content Egress, preserving sovereign data custody.

---

## 1. Executive Summary & Core Identity

- **Application Name**: Papryx Desktop
- **Developer / Founder**: Owais Ansari (Principal Systems Architect, Ahmedabad, Gujarat, India)
- **Official Domain**: https://papryx.app
- **License Model**: Closed Beta / Complimentary 90-Day Pro Evaluation Key (up to 2 machine slots)
- **Core Value Proposition**: Desktop-grade PDF manipulation, conversion, and OCR with zero cloud document uploads, eliminating subscription fatigue, network latency, and privacy compliance liabilities.

---

## 2. Technical Architecture & Defense-in-Depth

### Execution Environment
- **Loopback Isolation**: Document manipulation executes via a local engine bound strictly to `127.0.0.1`.
- **Zero Document Content Egress**: 0 bytes of document content, text streams, image layers, filenames, or OCR buffers leave the device.
- **Memory Security**: Ephemeral memory buffers and OS-level temp directory isolation with automated garbage collection upon tab closure.
- **Local NVMe SSD Performance**: Supports processing files up to 100MB at hardware bus speeds without bandwidth throttling.

### Cross-Platform Operating System Support
- **Windows**: 64-bit Windows 10 and Windows 11.
- **macOS**: macOS 12 (Monterey), 13 (Ventura), 14 (Sonoma), and 15 (Sequoia). Native dual-architecture support for Apple Silicon (M1/M2/M3/M4 arm64) and Intel (x86_64).

### Gated External Network Communication (Disclosures)
- **Seat Licensing (Supabase Cloud via TLS 1.3)**: Transmits only a one-way cryptographic SHA-256 key hash, pseudonymous client-side hardware asset tags (SHA-256 digests of BIOS/motherboard identifiers), machine hostname, and app version. (0 bytes of document data).
- **Binary Auto-Updates (Fastly CDN / GitHub Releases)**: Checks for release manifests (`latest.yml` / `latest-mac.yml`) and downloads verified differential delta blockmaps (.blockmap) on Windows or prompts for direct DMG download on macOS. (0 bytes of telemetry).

---

## 3. Regulatory Alignment & Compliance Matrix

- **EU GDPR (Articles 25 & 28)**: Complies with Data Protection by Design and by Default (Art. 25). Zero document sub-processors under Art. 28 because document contents never leave the local computer. Independent Data Controller model under Article 6(1)(b)/(f) with Supabase infrastructure under EU Standard Contractual Clauses (SCCs Module 2). Client-side SHA-256 pseudonymisation for hardware asset tags under GDPR Article 4(5) and EDPB Guidelines 01/2025.
- **India DPDPA 2023**: Enforces sovereign data custody by ensuring zero cross-border data transfer of sensitive personal records.
- **US HIPAA Security Rule**: Protects electronic Protected Health Information (e-PHI) by confining all processing within the covered entity's physical hardware perimeter.
- **Commercial NDAs**: Enables chartered accountants, tax consultants, and legal counsel to process client balance sheets and contracts without breaching confidentiality covenants.

---

## 4. Complete FAQ Knowledge Base (24 Authoritative Q&As)

### Category 1: Privacy & Air-Gapped Security

#### Q1: How is Papryx Desktop private compared to online PDF editors?
- **Summary**: Papryx runs 100% on-device on 127.0.0.1 with Zero Document Content Egress, unlike cloud tools that upload documents to remote servers.
- **Detailed Answer**: Most browser-based PDF editors require uploading entire documents to multi-tenant cloud servers where files are queued, staged in object storage, and processed on remote containers. Papryx Desktop operates entirely inside your physical computer perimeter. All document manipulation (inline text edits, OCR scanning, format conversion, compression, and permanent vector redaction) executes through a local on-device engine bound strictly to the loopback address (127.0.0.1). Zero bytes of document content, filenames, text streams, or image layers are ever transmitted over external networks.
- **Tags**: Zero Document Content Egress, Air-Gapped, Local Processing, Data Sovereignty

#### Q2: Can I use Papryx Desktop completely offline without an internet connection?
- **Summary**: Yes. All 24+ core PDF and Image Studio tools operate 100% offline without requiring Wi-Fi, Ethernet, or internet access.
- **Detailed Answer**: Yes. Papryx is built offline-first. Once installed and initially activated, all 24+ document tools (including Direct Text Editing, PDF to Excel conversion, standalone Tesseract OCR, compression, and AES-256 encryption) execute with complete autonomy on local hardware. You can disconnect Wi-Fi, activate Airplane Mode, or run inside air-gapped workstations in high-security corporate environments. Papryx includes a built-in 14-day offline grace period between periodic background license revalidations.
- **Tags**: Offline, Air-Gapped, Airplane Mode, No Internet

#### Q3: How can I independently audit and verify that no documents leave my computer?
- **Summary**: You can verify zero document transmission using Windows Resource Monitor (resmon.exe) or macOS Terminal (lsof -i -P).
- **Detailed Answer**: You do not need to rely on marketing promises. You can audit Papryx's network activity in real time using native administrative utilities:
  - On Windows: Open Resource Monitor (resmon.exe), navigate to the Network tab, and filter by Papryx. While opening, editing, or converting large PDF files, Network Send remains strictly 0 B/s.
  - On macOS: Open Terminal and run "lsof -i -P | grep -E 'Papryx|papryx-backend'". You will observe that socket connections are bound exclusively to loopback (127.0.0.1), with zero external listening ports or outbound WAN connections.
  You can also run packet capture tools like Wireshark filtering by "http and tcp.port != 443" to verify that zero plaintext document packets leave your device.
- **Tags**: Network Audit, Resmon, Wireshark, Terminal, Zero Document Content Egress

#### Q4: How does Papryx handle temporary files and memory security?
- **Summary**: Documents are processed in memory and isolated local temp directories, with automated garbage collection upon session completion.
- **Detailed Answer**: Papryx enforces defense-in-depth memory hygiene. Documents are processed in volatile RAM buffers or written to ephemeral, user-scoped OS temporary directories. Temporary conversion and rendering artifacts are automatically scrubbed upon tab closure or via automated background garbage collection cycles. Document content is never stored in persistent cloud databases, search indices, or shared system caches.
- **Tags**: Memory Security, Temp Files, Garbage Collection, Data Hygiene

#### Q5: Is Papryx suitable for confidential legal, financial, and healthcare documents?
- **Summary**: Yes. By guaranteeing Zero Document Content Egress, Papryx ensures full sovereign data custody for sensitive workflows.
- **Detailed Answer**: Yes. Papryx was specifically architected for professionals who handle confidential records (including corporate lawyers, chartered accountants, tax advisors, healthcare providers, and investment analysts); because documents never leave the physical computer, your organization preserves attorney-client privilege, complies with client Non-Disclosure Agreements (NDAs), and eliminates third-party cloud data exposure.
- **Tags**: Legal Documents, Financial Records, Healthcare, NDAs

---

### Category 2: PDF Editing & Typography

#### Q6: How does Papryx edit PDF text without layout displacement or baseline drift?
- **Summary**: Papryx calculates exact mathematical bounding boxes directly from the PDF coordinate space, delivering 0px baseline drift.
- **Detailed Answer**: Traditional PDF editors often reflow paragraphs destructively, causing text blocks to jump vertically or collide with adjacent lines. Papryx utilizes a mathematical coordinate alignment engine that translates native PDF point coordinates directly into the viewport translation space. It extracts raw unscaled point sizes, ascender/descender ratios, and rotation vectors directly from underlying content streams, ensuring that editing overlays snap precisely over existing text with 0px baseline drift.
- **Tags**: Direct Text Editing, 0px Drift, Typography, Layout Preservation

#### Q7: Which fonts are bundled offline in Papryx Desktop?
- **Summary**: Papryx bundles 22 offline font families across 81 static single-master TrueType binaries, covering Sans-Serif, Serif, Mono, and Script styles.
- **Detailed Answer**: To ensure identical visual output without relying on external cloud font servers or missing system fonts, Papryx bundles 22 offline font families across 81 static single-master TrueType binaries. These include popular Sans-Serif families (Inter, Roboto, Source Sans 3, Montserrat, Open Sans, Lato, Poppins, Carlito, Liberation Sans), Serif families (Liberation Serif, Merriweather, Playfair Display, EB Garamond, Lora), Monospace (Liberation Mono), and Script fonts (Dancing Script, Pacifico). When editing, Papryx attempts to reuse original embedded font subsets first, seamlessly falling back to bundled metric-compatible static fonts.
- **Tags**: Offline Fonts, TrueType, Typography, Font Embedding

#### Q8: How does Papryx handle the Indian Rupee symbol (₹) and legacy ERP invoice fonts?
- **Summary**: Papryx features native Unicode U+20B9 normalization and automated font routing to bundled glyph-complete static font binaries.
- **Detailed Answer**: Many accounting and billing platforms (Tally, SAP, Marg, Zoho) generate PDF invoices using legacy font encodings or non-standard glyph mappings for the Indian Rupee symbol (₹), often resulting in broken question marks (????) or missing boxes in standard viewers. Papryx automatically normalizes legacy character sequences to standard Unicode U+20B9 and routes text rendering to bundled static fonts with 100% native Rupee glyph coverage (Carlito, Roboto, Inter, Merriweather, Liberation Mono).
- **Tags**: Indian Rupee, ₹ Symbol, Invoice Editing, ERP Fonts, Unicode

#### Q9: Can I edit scanned paper contracts and non-searchable PDF documents?
- **Summary**: Yes. Papryx includes a standalone, offline Tesseract 5.x OCR engine that converts scanned documents into searchable, editable text.
- **Detailed Answer**: Yes. Papryx incorporates a fully bundled standalone Tesseract 5.x Optical Character Recognition (OCR) engine coupled with OpenCV image enhancement. You can scan or import image-only PDF documents, apply contrast normalization and shadow removal, and generate searchable PDF layers (invisible text overlay with exact word coordinates) or extract text directly into editable formats - entirely offline.
- **Tags**: OCR, Scanned PDF, Tesseract 5.x, Searchable PDF

---

### Category 3: Office & Image Conversions

#### Q10: How does Papryx convert PDF tables to Microsoft Excel (.xlsx) without breaking columns?
- **Summary**: A hybrid layout engine pairs typographic coordinate extraction with smart table boundary detection, preserving numbers, dates, and cell grids.
- **Detailed Answer**: Standard online converters frequently collapse adjacent columns into a single cell or split multi-line cells into dozens of disconnected rows. Papryx's PDF-to-Excel engine combines vector coordinate table detection with automated type inference. It accurately distinguishes between headers, numbers, currency values, and dates, writing native Excel formulas and formatting without cloud AI hallucinations. Users can choose between Continuous Flow (one consolidated sheet) or Split by Page (one sheet per PDF page).
- **Tags**: PDF to Excel, Spreadsheets, Table Extraction, Data Accuracy

#### Q11: Does Papryx require an active Microsoft Office or Adobe subscription to convert files?
- **Summary**: No. Papryx bundles independent open-source conversion layout engines and requires zero Office 365 or Adobe subscriptions.
- **Detailed Answer**: No. Papryx does not require Microsoft Office, Adobe Acrobat, or any monthly subscription. It ships with bundled, cross-platform Python layout engines that parse and convert PDF, Word (.docx), Excel (.xlsx), and PowerPoint (.pptx) structures locally. On Windows workstations that happen to have Microsoft Office installed, Papryx can optionally leverage background COM interfaces for pixel-perfect print layout fidelity; otherwise, native offline open-source fallbacks execute automatically.
- **Tags**: Office Conversion, No Subscription, Standalone, Word, PowerPoint

#### Q12: Can Papryx convert Apple iPhone HEIC and HEIF photos to PDF and standard image formats?
- **Summary**: Yes. Papryx includes bidirectional HEIC/HEIF decoding and encoding, converting smartphone photos to JPG, PNG, WebP, or multi-page PDFs.
- **Detailed Answer**: Yes. Papryx incorporates native decoding and encoding for modern Apple HEIC/HEIF formats. You can batch-convert smartphone photos (.heic, .heif) directly into JPG, 32-bit transparent PNG, WebP, AVIF, TIFF, BMP, ICO icon bundles, or compile an entire photoshoot into a single compact PDF document without transmitting images to cloud servers.
- **Tags**: HEIC, HEIF, Apple Photos, Image Studio, Image to PDF

#### Q13: What image manipulation tools are included in Image Studio?
- **Summary**: Image Studio features a Professional Image Resizer with 5 dimension modes, batch converter across 10 formats, and EXIF privacy scrubbing.
- **Detailed Answer**: Papryx Image Studio provides two dedicated utilities:
  1. Professional Image Resizer: Features 5 dimension modes (Exact Pixels with Aspect Ratio Lock, Uniform Percentage Scaling 5%-400%, Target File Size Budget optimization to meet strict upload caps, Longest/Shortest Edge, and Print DPI sizing) with high-fidelity Lanczos resampling and smart letterbox padding.
  2. Universal Format Converter: Batch converts up to 100 images in parallel across HEIC, HEIF, PNG, JPG, WebP, AVIF, TIFF, BMP, ICO (multi-resolution 16-256px), and PDF, complete with 1-click EXIF/GPS privacy stripping.
- **Tags**: Image Resizer, Image Converter, EXIF Scrubbing, Lanczos

---

### Category 4: Legal Compliance & NDAs

#### Q14: How does Papryx support compliance with the EU GDPR (Articles 25 & 28)?
- **Summary**: Papryx embodies Privacy by Design (Art. 25). With Zero Document Content Egress, Papryx has zero sub-processors for document content.
- **Detailed Answer**: Under the EU General Data Protection Regulation (GDPR):
  - Article 25 (Privacy by Design & by Default): Document processing takes place strictly inside the user's physical hardware perimeter, eliminating unvetted cloud transfer risks.
  - Article 28 (Data Processor Chains): Because customer document contents and filenames never touch Papryx servers, Papryx never acts as a Data Processor for your document content, eliminating complex sub-processor agreements.
  For licensing and activation, Papryx acts as an Independent Data Controller under GDPR Art. 6(1)(b)/(f), using Supabase infrastructure under EU Standard Contractual Clauses (SCCs Module 2).
- **Tags**: EU GDPR, Article 25, Article 28, Privacy by Design, Data Protection

#### Q15: Does Papryx comply with India's DPDPA 2023 and the US HIPAA Security Rule?
- **Summary**: Yes. Papryx enables full compliance by ensuring sovereign data custody remains on the covered entity's local device.
- **Detailed Answer**: Yes. Under the Indian Digital Personal Data Protection Act (DPDPA 2023), personal data contained within documents is never transferred across cross-border cloud corridors, preserving total sovereign data custody. Under the US Health Insurance Portability and Accountability Act (HIPAA) Security Rule, processing Protected Health Information (PHI) entirely on-device eliminates the need for Business Associate Agreements (BAAs) for document handling, as zero patient data ever enters cloud custody.
- **Tags**: DPDPA 2023, HIPAA, PHI, Sovereign Data Custody

#### Q16: What data is transmitted when activating a Papryx license?
- **Summary**: Only one-way SHA-256 key hashes, pseudonymous hardware asset tags, and app version. Exactly 0 bytes of document content are transmitted.
- **Detailed Answer**: Papryx maintains two strictly controlled external communication channels over TLS 1.3:
  1. Licensing & Activation (Supabase Cloud): Transmits only a one-way cryptographic SHA-256 key hash, pseudonymous hardware asset tags (client-side SHA-256 digests of BIOS/motherboard identifiers under GDPR Art. 4(5) and EDPB Guidelines 01/2025), machine hostname, and app version. Plaintext keys and raw physical serial numbers never leave your device.
  2. Binary Updates (GitHub Releases / Fastly CDN): Checks for version manifests (latest.yml / latest-mac.yml) and downloads verified installer delta chunks.
  Under no circumstances are document contents, file names, page counts, or user document metadata transmitted to any external server.
- **Tags**: Data Minimization, Licensing Telemetry, Pseudonymous Tags, Zero Document Content Egress

---

### Category 5: Industry & Competitor Comparisons

#### Q17: How does Papryx Desktop compare to Adobe Acrobat Pro?
- **Summary**: Papryx offers 100% on-device privacy with zero cloud prompts, faster local startup, a ~850MB footprint, and no recurring $239/year subscription.
- **Detailed Answer**: While Adobe Acrobat Pro is a capable legacy suite, it requires continuous cloud integration, recurring subscriptions ($239+/year), and multi-gigabyte Creative Cloud background daemons. Papryx Desktop offers key advantages for privacy-conscious users:
  1. Zero Document Content Egress: No unexpected prompts to upload files to Adobe Document Cloud.
  2. Performance & Footprint: Lean ~850MB installation with instant launch speeds at SSD performance.
  3. Transparent Offline Workflow: Functions perpetually offline with no account login requirements for editing.
  4. Typographic Precision: 0px baseline drift and bundled offline fonts specifically tuned for legal and financial documents.
- **Tags**: Adobe Acrobat Alternative, Software Comparison, Pricing, Acrobat Pro

#### Q18: Why should businesses avoid free online PDF converters like iLovePDF or Smallpdf?
- **Summary**: Online converters expose confidential business records to third-party web servers, data retention queues, and cloud security vulnerabilities.
- **Detailed Answer**: Free online converters fund their infrastructure by ingesting files onto public web servers. When uploading confidential balance sheets, tax returns, merger agreements, or patient records to online websites:
  - Your data traverses public internet routers and is stored on multi-tenant cloud object storage.
  - Files remain on remote disks until background cleanup cron jobs run (often hours or days later).
  - You introduce severe data leak risks that breach client NDAs and data privacy regulations.
  Papryx eliminates these risks entirely by executing all operations locally on 127.0.0.1 with verified zero outbound WAN traffic.
- **Tags**: Online Converters, iLovePDF Alternative, Smallpdf Alternative, Data Breach Risk

#### Q19: How does Papryx's redaction tool differ from drawing black rectangles over text?
- **Summary**: Papryx permanently excises and destroys underlying vector text and image streams, making redacted data mathematically unrecoverable.
- **Detailed Answer**: Drawing black boxes or highlight overlays in standard viewers merely hides text visually; anyone can copy the underlying text or inspect the PDF layer to reveal the concealed data. Papryx performs true vector-level redaction using an irreversible sanitization engine: it permanently destroys, scrubs, and removes character codes, vector paths, and raster pixels from the PDF content stream. Once saved, the redacted information cannot be recovered by any PDF viewer or reverse-engineering tool.
- **Tags**: Permanent Redaction, Vector Redaction, Sanitization, Security

---

### Category 6: Platform Support & Beta Access

#### Q20: Which operating systems and hardware architectures does Papryx support?
- **Summary**: Papryx natively supports 64-bit Windows 10/11 and macOS 12+ across Apple Silicon (M1/M2/M3/M4) and Intel (x64) Macs.
- **Detailed Answer**: Papryx Desktop provides native cross-platform support with 100% feature parity:
  - Windows: 64-bit Windows 10 and Windows 11.
  - macOS: macOS 12 (Monterey), 13 (Ventura), 14 (Sonoma), and 15 (Sequoia) with native dual-architecture builds for Apple Silicon (M1/M2/M3/M4 arm64) and Intel (x64).
  Minimum requirements: 4GB RAM, standard dual-core CPU, and ~850MB free disk space for bundled fonts, standalone OCR, and conversion binaries.
- **Tags**: Windows 11, macOS, Apple Silicon, M-Series, Intel, System Requirements

#### Q21: How do I claim a complimentary 90-day Pro license key?
- **Summary**: Submit your request via the Early Access registration form on papryx.app to receive a 90-day Pro license key via email.
- **Detailed Answer**: During our closed beta phase, we are issuing complimentary 90-day Pro evaluation licenses to legal counsel, financial auditors, enterprise administrators, and privacy-conscious professionals. Simply click "Request Early Access" anywhere on papryx.app, choose your operating system (Windows or macOS), and submit the form. You will receive an immediate confirmation email followed by your Pro license key (supporting up to 2 machine slots).
- **Tags**: Early Access, Closed Beta, 90-Day Pro Key, Free Evaluation

#### Q22: How do automatic updates work if Papryx has Zero Document Content Egress?
- **Summary**: Papryx checks for software updates via minimal Fastly CDN manifests, downloading 5-20MB differential delta blockmaps on Windows.
- **Detailed Answer**: Papryx cleanly decouples software binary updates from document processing:
  - On Windows: When connected to the internet, Papryx silently checks for updates via Fastly CDN 15 seconds after launch. Updates download as differential delta blockmaps (.blockmap) requiring only 5-20MB of bandwidth rather than redownloading the entire installer.
  - On macOS: When an update is published on GitHub Releases, Papryx presents an in-app banner prompting the user to download the updated DMG.
  All existing documents, custom settings, and encrypted license credentials persist untouched across updates, with zero document telemetry.
- **Tags**: Auto-Updates, Fastly CDN, Blockmaps, Zero Telemetry

#### Q23: Is there a file size limit for PDF processing in Papryx?
- **Summary**: Papryx easily processes large documents up to 100MB across all 24 tools, running entirely at local NVMe SSD speeds.
- **Detailed Answer**: Unlike cloud tools that enforce strict 15MB or 25MB upload limits, Papryx Desktop processes large, complex documents up to 100MB across all tools (including multi-hundred-page tax filings, scanned legal case bundles, and high-resolution CAD schematics). Because all processing executes locally in RAM and on local storage, document operations run at native NVMe SSD speeds without network bandwidth throttling.
- **Tags**: 100MB File Limit, Large Documents, NVMe Speed, High Capacity

#### Q24: What toolsets are available in Papryx Desktop?
- **Summary**: Papryx includes 24 tools across Direct PDF Editing, Office Conversions, Image Studio, OCR, and Security.
- **Detailed Answer**: Papryx Desktop consolidates 24 local document workflows:
  1. PDF Editing & Annotation: Direct Text Editing (0px drift), Add Text, Add Shapes, Freehand Draw, Add Images, Permanent Redaction, Sign & Stamp.
  2. Conversions & Extraction: PDF to Excel (.xlsx), PDF to Word (.docx), PDF to PowerPoint (.pptx), PDF to CSV, PDF to TXT, PDF to Images (PNG/JPG).
  3. Image Studio: Professional Resizer (5 modes with Lanczos filter and file size budget), Batch Image Converter across 10 formats (HEIC, HEIF, PNG, JPG, WebP, AVIF, TIFF, BMP, ICO, PDF) with EXIF scrubbing, and Images to PDF compiler.
  4. OCR & Scanning: Standalone Tesseract 5.x OCR with OpenCV image enhancement for searchable PDF creation.
  5. Page Operations & Security: Merge PDFs, Split PDFs, Rotate Pages, Delete Pages, Extract Pages, Reorder Pages, Compress PDF, and AES-256 Encryption / Decryption.
- **Tags**: 24 Tools, Feature Matrix, Complete Suite, PDF Utilities

---

## 5. Official Verification Recipe for Enterprise IT Auditors

1. **Windows Network Audit**:
   - Open Windows Resource Monitor (`resmon.exe`) and select the `Network` tab.
   - Filter processes by `Papryx.exe`.
   - Open, edit, convert, and OCR a confidential 50MB PDF document.
   - Verified result: **Network Send remains strictly 0 B/s**.

2. **macOS Socket Audit**:
   - Open Terminal and execute:
     ```bash
     lsof -i -P | grep -E "Papryx|papryx-backend"
     ```
   - Verified result: **All sockets are bound strictly to `127.0.0.1` (loopback). Zero remote network listeners or external connections exist.**

3. **Air-Gap Verification**:
   - Disconnect workstation from Wi-Fi, Ethernet, and mobile data.
   - Perform full PDF text editing, OCR scanning, Excel table extraction, and image resizing.
   - Verified result: **All functions execute with 100% autonomy at full local SSD speed.**