Security Overview
How DSD Tools Protects Your Documents & System Integrity
1. Client-Side Sandboxing (Zero-Knowledge Architecture)
The strongest security guarantee is never possessing user data. By leveraging WebAssembly and modern browser standards (HTML5 Canvas, Web Cryptography API, Web Workers), our tool engine performs conversions inside your device’s sandbox. No file packets are transmitted over internet transit routes.
2. Server Hardening & Temporary Storage Security
When server assistance is needed for heavy batch processing:
- Non-Executable Storage: Uploaded files are assigned random cryptographic nonces and stored in private directories with script execution strictly disabled.
- Automatic Destruction: An automated scheduled cron cleaner purges all temporary files within 60 minutes of completion.
- Strict MIME & Binary Validation: Uploads undergo magic byte inspection to block dangerous executable files (.php, .exe, .sh, etc.).
- Transport Layer Security: All data in transit is encrypted using modern TLS 1.3 encryption.
3. Vulnerability Disclosure
If you discover a security vulnerability, please report it responsibly to info@nivotools.com. We review all responsible disclosures promptly.