Security Architecture & WASM Sandbox Whitepaper | Drop & Clean

Security architecture and isolated local WebAssembly runtime whitepaper.

WebAssembly & OPFS Storage Sandbox

AI inference engines (Express and Pro) execute within isolated Web Worker threads using compiled WebAssembly binaries, separated from the main thread and from other site data. File input and output utilize the Origin Private File System (OPFS) with native streaming, enabling safe processing of very large media, including 4K video files exceeding 10 GB, without loading the full file into memory.

Payment Processors (Stripe & PayPal) & Data Encryption

All payment processing is handled by PCI-DSS compliant payment processors, including Stripe and PayPal, over TLS 1.3 encrypted connections and signed webhooks. The Company does not store, process, or retain credit card details, bank account numbers, or other financial credentials on its systems. Payment data is transmitted directly between you and the payment processor under their applicable terms.

WebCodecs Direct Bitstream Passthrough

Video streams are extracted, remuxed, and re-wrapped locally using hardware-accelerated WebCodecs and in-browser media tooling. Video pixel data is passed through bit-for-bit without lossy re-encoding, so the visual quality of your original file is preserved exactly. No video content is ever transmitted outside your device during this process.