The boundary is the product. Not a footnote.
Redactorr eliminates data liability by moving the detection perimeter directly into your browser. We don't ask you to trust our cloud with your raw secrets—because your raw secrets never leave your device.
Six Layers of Data Protection
Engineered from the ground up to comply with the Australian Privacy Act 1988, HIPAA, and GDPR.
Zero-Upload Browser Scanning
Pattern extraction and OCR run in your browser engine. Sensitive source texts are parsed purely inside client WASM memory.
Client-Keyed AES-GCM-256
Pseudonymization token maps and session states are encrypted in IndexedDB using keys held strictly on the user machine.
SHA-256 Audit Immutability
Every reviewed session generates an immutable SHA-256 cryptographic signature proving exact compliance and zero tampering.
Hard LLM Boundary Handoff
When integrating with AI assistants, only tokenised strings ([PERSON_1], [MEDICARE_1]) cross the network boundary.
30-Day Auto-Purge Lifecycle
Team Vault workspaces enforce strict retention expirations, automatically shredding expired session tokens and metadata.
On-Premise Air-Gapped VPC
Enterprise tiers deploy directly into private Docker containers behind your sovereign firewall with zero external telemetry.
Data Transmission & Boundary Matrix
Transparent inspection of data residency and network transmission across every stage of processing.
| Processing Stage | Execution Environment | Network Transmission | Data Exposure Risk |
|---|---|---|---|
| 01 · Document Ingestion & OCR | Browser WASM / Memory | 0 Bytes (Local Only) | None |
| 02 · Pattern Detection & Validation | Client-Side AEGIS Engine | 0 Bytes (Local Only) | None |
| 03 · Human Review & Masking | Operator Workspace GUI | 0 Bytes (Local Only) | None |
| 04 · Encrypted Vault Persistence | Local IndexedDB / Team Vault | Client-Keyed AES-GCM Payload | Encrypted Token Map Only |
| 05 · AI Assistant Inference | Model Endpoint (Claude / OpenAI) | Tokenised Context Strings | Zero Raw PII Exposure |
Need a custom security review or DPA?
Our engineering team is ready to complete your vendor security questionnaires, provide SOC 2 documentation, or demonstrate on-premise air-gapped deployments.