Untrusted by default
Files are decoded only by the active local converters. Unsupported types are not sent elsewhere or relabeled as another format.
Security from input to export
Local processing, output signature checks, safe headers, and temporary downloads protect every active conversion route.
Browser boundaries
Active conversion runs in the browser and output files use temporary object URLs that are revoked when jobs are removed or the page closes.
Verified results
Output signatures and decodability are checked before the interface exposes a download.
Report a problem
Do not attach sensitive source files to an initial security report. Contact details are published through Novus Stream Solutions.