1. Executive Summary & Privacy Guarantee
Papryx Desktop is architected from the ground up as a 100% On-Device, Privacy-First PDF & Document Workstation.
- Zero Cloud Document Uploads: Under no circumstances are user documents, text content, image layers, form inputs, metadata, OCR scans, or file names transmitted to external servers, cloud databases, or third-party APIs.
- 100% On-Device Local Processing: All PDF manipulation, text editing, rasterization, optical character recognition (OCR), format conversion, and encryption execute exclusively on the client computer's local CPU and RAM.
- Strict Local Process Isolation: Internal application engines communicate strictly across local loopback channels bound to
127.0.0.1on ephemeral ports. No external network interfaces are ever opened for document processing. - Minimal Gated Network Channels: All document tools function 100% offline. Minimal, strictly gated HTTPS requests occur only for one-time digital license activation (transmitting one-way cryptographic hashes) and opt-in differential software updates.
2. Technical Architecture & Data Boundary
| Capability Suite | Execution Environment | Network State | Data Handled |
|---|---|---|---|
| PDF Direct Text & Font Editing | 100% Local | None (Air-Gapped) | PDF Binaries, 22 Bundled Fonts |
| Two-Way Office Conversions (.xlsx, .docx, .pptx) | 100% Local | None (Air-Gapped) | Local Document Streams |
| OCR Text Scanner & Image Enhancer | 100% Local | None (Air-Gapped) | Bundled Tesseract OCR Engine |
| Document Cryptography & Redaction | 100% Local | None (Air-Gapped) | AES-256 Passwords, Vector Scrubbing |
| Universal Image Studio & Resizing | 100% Local | None (Air-Gapped) | Local Image Buffers (HEIC/HEIF, PNG, JPG, WebP, AVIF, TIFF, BMP, ICO) |
| Commercial Seat Licensing | Remote (HTTPS Handshake) | Minimal HTTPS Handshake | Exact fields: One-way key hash, pseudonymous SHA-256 hardware identifier hashes (hardware asset tags), machine hostname, and application version. (0 bytes of document content, text, or filenames). |
| Binary Auto-Updates | Remote (HTTPS via Fastly CDN) | Byte-Range HTTPS GETs | Public binary release metadata, SHA-512 checksums, and differential .blockmap delta chunks (Windows) or release manifests (macOS). (0 bytes of document data or telemetry). |
3. Regulatory & Compliance Alignment
Supports Data Protection by Design (Art. 25). Zero document content transmission eliminates document sub-processors and cloud cross-border transfer risks. For commercial seat licensing metadata, Papryx operates as an Independent Data Controller under Art. 6(1)(b)/(f), transferring pseudonymous telemetry to infrastructure providers under EU Standard Contractual Clauses (SCCs Module 2).
Architected to support sovereign data custody principles under DPDPA 2023. Zero personal document contents are stored or processed externally. Minimal operational metadata is processed strictly for digital seat management.
Supports HIPAA compliance by keeping electronic protected health information (e-PHI) and patient records strictly within the covered entity's physical device perimeter.
Chartered Accountants, tax auditors, and legal professionals can process sensitive client balance sheets and contracts without breaching non-disclosure agreements.
4. Independent Client Verification Protocol (Audit Recipe)
Enterprise security teams, CISOs, and IT auditors can independently verify Papryx's zero document egress guarantee on any workstation in under 60 seconds:
A. Network Packet Inspection (Wireshark / Fiddler)
Launch Wireshark, filter by http and tcp.port != 443, and process a confidential 50MB PDF document. Result: Exactly 0 outbound packets containing document content or filenames are generated.
B. Operating System Process Monitoring
On Windows: Open Resource Monitor (resmon.exe) ➔ Network tab ➔ Filter by Papryx. Network Send remains strictly 0 B/s during all editing, conversion, and OCR operations.
On macOS: Open Terminal and run lsof -i -P | grep -E "Papryx|papryx-backend". Result: Sockets are bound strictly to 127.0.0.1 with zero remote network listeners.
C. Air-Gap / Airplane Mode Test
Disconnect the computer from Wi-Fi and Ethernet. Execute text editing, format conversion, and OCR. All operations execute at full native SSD speed without errors or connection prompts.
5. Authorized Vendor Declaration
I hereby certify and declare that Papryx Desktop has been engineered, audited, and verified in accordance with the strict zero document egress and data privacy standards described herein.
