Back to Home

Security Manifesto

We believe that the only truly secure server is the one that never receives your data.

1. The Zero-Knowledge Standard

"Zero Knowledge" normally refers to encryption where the provider holds the data but cannot read it. We take it a step further: Zero Possession.

SwiftFiles is engineered to process data ephemeral. We do not have a database provided for user files. We do not have S3 buckets for temporary storage. We do not have backend API endpoints that accept multipart/form-data.

2. Powered by WebAssembly (WASM)

Traditionally, editing a generic PDF or compressing a video required a backend server because browsers were too slow. WebAssembly changed the game. It allows us to run high-performance C++ and Rust code directly in your browser tab.

Multimedia (FFmpeg.wasm)

For audio and video tools, we use a WASM port of FFmpeg. Your browser acts as a virtual video editing workstation.

Documents (PDF-lib / Tesseract)

PDF manipulation and OCR happens via JS libraries running on your V8 engine. No file transfer needed.

3. Don't Trust, Verify

Any website can claim they value privacy. We invite you to audit us.

# How to verify no data leaves your PC:

  1. Open your browser Developer Tools (F12)
  2. Go to the Network tab
  3. Process a file (e.g., compress an image)
  4. Look for outgoing requests (Method: POST/PUT)

You will see requests for Google Analytics or Ads (if enabled), but you will never see your file payload being transmitted.

4. Limitations & Scope

While our architecture helps eliminate server-side data leaks, client-side security depends on your environment.

  • Malware: If your computer has malware (screen recorders, keyloggers), they can see what you see in the browser.
  • Extensions: Malicious browser extensions can read page content. We recommend using Incognito mode for sensitive documents.