Security

Browser tasks have byte and pixel limits. PDF merging runs in a terminable worker. These limits reduce resource use but do not make an unsafe document trustworthy. Keep your browser updated and do not open untrusted downloads outside an appropriate viewer.

Server file processing remains disabled until container isolation, malware scanning, encryption, expiry and quotas are verified. The native OCR worker uses real Tesseract with fixed arguments and subprocess timeouts.

Do not enter passwords, secrets or confidential documents on devices you do not trust. Report vulnerabilities to the verified contact listed on our contact page when configured.