Security Model — DocSanitizer

1. Security Architecture Principles

DocSanitizer is engineered around verifiable, zero-trust client-side processing:

Zero Cloud Infrastructure: No server-side document parsing or storage. Your documents are never uploaded.
Memory Safety in Rust: The core parsing and PII redaction engine is written in Rust, eliminating buffer overflows, use-after-free, and memory corruption bugs.
RAM-Only Lifecycle: All raw bytes and intermediate token arrays reside in transient memory and are wiped when the sanitization session ends.

DocSanitizer enforces minimal data lifetimes across all supported environments:

Data Type	Lifetime	Storage Location
Raw file bytes	Duration of sanitization call	RAM only
Parsed text & tokens	Duration of sanitization call	RAM only
Sanitized Markdown	Until user copies or dismisses	RAM only
Pro Entitlement Token	Subscription period	Encrypted Storage
User Settings	Until user changes or resets	Local Preferences

We treat security vulnerabilities with high urgency. If you discover a vulnerability in the engine or web app, please report it directly:

📧 Security contact: eladyifee@gmail.com