Trust Center

Clear, factual details on how your data is handled, which tools run in your browser, and the infrastructure supporting our platform.

💻Browser-First Architecture

Most tools on Zynocode Labs execute entirely within your browser memory using WebAssembly, Web Crypto, and HTML5 Canvas. Your documents, images, JSON payloads, and private notes are processed locally on your device and are never uploaded to our servers.

For developer API endpoints and workspace account management, requests execute on serverless edge functions with encrypted transport.

🛡️Security & Defenses

Transport EncryptionTLS 1.3

Storage EncryptionAES-256-GCM

✓ Strict Content Security Policy (CSP)
✓ HSTS Headers
✓ Zero-Trust File Upload Validations
✓ Constant-time CSRF Protection
✓ AI Prompt Injection Filtering

Data Sub-Processors & Infrastructure

We work with trusted cloud providers for hosting, authentication, and billing. We do not sell user data.

Vercel

Application hosting, edge routing, and serverless compute

Neon

Serverless PostgreSQL database with encrypted connections

Razorpay

Payment processing in INR (PCI-DSS compliant partner)

Cloudflare

DNS and edge network security

Hugging Face

Public CDN for open-source client-side model weights

Nodemailer

Transactional SMTP emails for auth and account alerts

Google OAuth

NextAuth social sign-in when authorized by user

Legal Policies

Responsible Disclosure

We welcome security researchers who report potential vulnerabilities responsibly. If you discover a security vulnerability, please contact our team directly.

[email protected] →

Platform Changelog

Review verified release updates and version history

Documentation Hub

Review client-side privacy architecture and integration guides