DATA OPERATIONS SYSTEMSECURITY

SECURITY

Your file comes in, leaves clean and disappears.

These are product engineering practices — not a claim of legal certification. They describe how we handle your data in practice.

IMMUTABLE ORIGINAL

We compute SHA-256 on receipt and never alter the uploaded file. Every cleanup produces a new file.

ISOLATION

Each file is processed in your account and visible only to you. Every route checks ownership — status, preview, report and download.

24 H RETENTION

Original, samples, previews and result expire within 24 hours, including on failure or abandonment. Deletion removes the content immediately.

SECRETS ON BACKEND

TLS in production, private storage and keys only on the server — never in the frontend or the repository.

LOGS WITHOUT DATA

We log opaque IDs, states, counts and duration. Never rows, samples or personal values.

HARDENED UPLOAD

Blocks ZIP bombs, external XML/entities, path traversal and fake MIME; the worker never executes the file.

AI

The AI never sees the whole file.

Smart suggestions receive only a minimized sample and statistics — never the full spreadsheet, and never full real names, tax IDs, phones or emails for convenience. The model does not transform the dataset, run code or access the network or files. Without an AI key, the deterministic mode keeps working.

APPROVAL

Nothing applies without your approval.

Every cleanup requires explicit plan approval, bound to the file, the revision and the engine version. Change any option and the approval is invalidated and a new preview is generated. Invalid or ambiguous values stay intact and are reported — never silently converted.

QUESTIONS

Found something?

To report a security issue or request deletion of your data, reach us at contact@arkanalab.com.br.