Transparency & Trust Report
At FoldPDF, transparency is not an legal page—it is built directly into our code. Read our live metrics, warrant canaries, and data security standards.
Live Warrant Canary
Many government agencies force organizations to hide wiretap orders under gag directives. This section serves as our live Warrant Canary, updated dynamically to verify that all systems remain sound.
No Secret Government Subpoenas
To date, FoldPDF has received zero secret court directives, national security requests, or data interception demands from government or law enforcement agencies globally.
No User Backdoors Configured
We have configured zero client backdoors or secret pathways. The application has no mechanism to intercept or decrypt custom document arrays processed in browser RAM.
Zero Third-Party Search Assets
We do not sell, rent, or monetize raw metadata layers or document structures to artificial intelligence developers or marketing trackers.
How to Audit the Code Yourself
You do not need to take our word for it. You can inspect the network connections in real-time. Follow this simple guide to see our browser-based security in action.
Right-click the page and select Inspect or press F12 to open your mobile or desktop developer tools catalog.
Switch to the Network audit tab. This monitors all HTTP requests, sockets, and assets travelling between your device and external databases.
Select one of our browser-based tools and execute an action like Merge or Watermark. You can observe that zero document assets are sent to the cloud. All math executes 100% locally.
Zero-Trust Technical Metrics
Because we construct standard layout schemas on the client-side level, our architecture satisfies compliance controls by discarding document components immediately when active browser sessions close.
Approved Subprocessor Disclosure
Transparency means detailing exactly who helps deliver our services. FoldPDF keeps subprocessor lists very tight. Under no condition can downstream partners retrieve raw document components without client commands.
| Subprocessor Name | Functional Role | Data Retained | Entity Jurisdiction |
|---|---|---|---|
| Google Cloud Platform / Cloud Run | Static Asset Hosting & Server Proxy | Absolutely None (No caches or file storage configured) | Germany / EU West |
| Google Gemini API Gateway | Local AI Text Parsing Proxy | Zero (Ephemeral text token analysis only; strict zero-training policies) | United States (Encrypted API Gateway) |