1. Executive Summary & Privacy Guarantee
Papryx Desktop is architected from the ground up as a 100% On-Device, Privacy-First PDF Workstation.
- Zero Cloud Document Uploads: Under no circumstances are user documents, text content, image layers, form inputs, metadata, OCR scans, or file names transmitted to external servers, cloud databases, or third-party APIs.
- 100% Localhost Binary Processing: All PDF manipulation, text editing, rasterization, OCR, format conversion, and encryption execute exclusively on the client computer's local CPU and RAM.
- Strict Loopback Boundary (127.0.0.1): Internal application engines communicate strictly across local loopback sockets bound to
127.0.0.1on ephemeral ports. No external network interfaces are ever opened for document processing.
2. Technical Architecture & Data Boundary
| Capability Suite | Execution Environment | Network State | Data Handled |
|---|---|---|---|
| PDF Direct Text & Font Editing | 100% Local | None (Air-Gapped) | PDF Binaries, 22 Bundled Fonts |
| Two-Way Office Conversions (.xlsx, .docx, .pptx) | 100% Local | None (Air-Gapped) | Local Document Streams |
| OCR Text Scanner & Image Enhancer | 100% Local | None (Air-Gapped) | Bundled Tesseract OCR Engine |
| Document Cryptography & Redaction | 100% Local | None (Air-Gapped) | AES-256 Passwords, Vector Scrubbing |
| Universal Image Studio & Resizing | 100% Local | None (Air-Gapped) | Local Image Buffers (PNG, JPG, WebP, TIFF, BMP) |
| Commercial Seat Licensing | Local + Cryptographic Verification | Minimal HTTPS Handshake | Key Hash, Hardware Hash. (0 document files, paths, or text). |
| Binary Auto-Updates | Fastly CDN Public Release Check | Byte-Range HTTPS GETs | Public binary release hashes & compiled .blockmap delta chunks. (0 document data or telemetry). |
3. Regulatory & Compliance Alignment
Zero cloud transmission eliminates cross-border data transfer risks, third-party sub-processors, and unauthorized cloud exposure.
Fully compliant with on-device sovereign data custody principles. No digital personal data payloads are ever collected or stored remotely.
Electronic protected health information (e-PHI) and patient records remain strictly within the covered entity's local workstation perimeter.
Chartered Accountants, tax auditors, and legal professionals can process sensitive client balance sheets and contracts without breaching non-disclosure agreements.
4. Authorized Vendor Declaration
I hereby certify and declare that Papryx Desktop has been engineered and verified in accordance with the strict zero-egress and data privacy standards described herein.
