Privacy & Security

AnonDocs is built with privacy and security as core principles. This document explains how we protect your data.

Data Processing

Local Processing

• All anonymization happens locally on your infrastructure
• No data is sent to external third-party services
• Perfect for GDPR, HIPAA, and other compliance requirements

Zero Data Retention

• Uploaded files are immediately deleted after processing
• No data is stored in databases
• All processing happens in memory only
• No logging of sensitive content

Open Source & Auditable

• Full source code available for security audits
• No black-box APIs or proprietary services
• You control the entire data pipeline
• Community-reviewed codebase

Self-Hosted Deployment

When self-hosted, AnonDocs provides:

• Complete data sovereignty
• No external API calls
• Air-gapped deployment capability
• Full control over security policies

Security Recommendations

For production deployments:

• Run behind a reverse proxy with rate limiting
• Use HTTPS/TLS for all connections
• Implement authentication/authorization for API access
• Run in an isolated network segment for sensitive data
• Regular security updates for dependencies
• Consider running on air-gapped systems for maximum security

Compliance

AnonDocs is designed to help you meet:

• GDPR: European data protection regulations
• HIPAA: Healthcare information privacy
• CCPA: California privacy laws
• Other regional data protection requirements

Trust & Transparency

• Open source code means you can verify security claims
• No hidden data collection or tracking
• Community-driven development
• Regular security audits and updates