What "Runs in Your Browser" Means

Plenty of tools say your files are "secure" or "deleted after processing." Fewer say the file never leaves your device, and the difference is worth understanding. Particularly for the documents these tools handle: bank statements, tax forms, closing packets, customer address lists.

The two architectures

Server-side. Your file is uploaded, processed on a machine you don't control, and a result is sent back. The file existed on someone else's disk, however briefly. Retention policies describe what happens next; they don't change what already happened.

Client-side. The code that reads your file runs inside your browser tab. The file is opened from your own disk into your own memory. No request carries it anywhere.

How to check, in thirty seconds

You don't have to take anyone's word for it:

1. Load the tool's page.
2. Disconnect from the internet. Turn off wifi.
3. Use the tool.

If it works offline, nothing was being sent anywhere. If it fails, something was. This is a conclusive test and it takes less time than reading a privacy policy.

The more technical version: open your browser's developer tools, go to the Network tab, and watch while you load a file. An upload is a request carrying your file's bytes. If it's not there, it didn't happen.

Where the claim gets slippery

Two cases deserve scrutiny.

Scanned documents. Reading a scan requires OCR, which is heavy. Many tools that process digital PDFs locally send scanned ones to a server. That may be a perfectly reasonable trade, but "never leaves your device" stops being true the moment it happens, and the honest thing is to say which files take which path.

AI-assisted extraction. If a tool uses a language model to interpret an unusual layout, your document's contents go to that model's provider. Some tools describe this as processing "in the browser" because the browser makes the request. That isn't the same thing.

Why it matters for these documents specifically

A bank statement is close to a complete profile of a person: where they work, where they shop, what they pay in rent, when they travel. A closing packet contains full legal names, addresses, and identifiers for several parties at once. A customer address list is other people's data, which you're responsible for.

For a holiday photo, upload convenience wins easily. For these, it's worth asking whether the upload needs to happen at all, and increasingly, it doesn't.