Security
Security built in, not bolted on
FileKit is engineered so your files are safe by architecture — processed locally, isolated, and never retained.
Client-side isolation
Heavy processing runs in Web Workers, keeping the main thread responsive and isolating file data from third-party scripts.
No server retention
Private local tools never upload files, including advanced tools like Smart CSV Cleaner that process entirely on your device. The few server tools use stateless processing with no file retention.
Input validation
Files are validated by type, size, and magic bytes before processing to prevent malformed input from causing issues.
Strict security headers
COOP/COEP, HSTS, X-Frame-Options, and Permissions-Policy harden the browser surface. WASM and heavy models load only when a tool is used.
No file data to third parties
Analytics and ads never receive file contents or filenames. Your files are processed on your device and are never sent to our servers or any third party.
Read the Privacy Policy
What we collect (almost nothing) and how to verify it yourself.