Security Architecture
FolderBit is engineered from the ground up for data isolation, document privacy, and resilient encryption standards.
Local-First Web Workers
Standard PDF tasks (Merge, Split, Watermark, Page Numbering) execute entirely in local browser RAM using WebAssembly. Files never traverse network wires or touch remote disks.
AES-256 PDF Encryption
Password protection utilities apply standard AES-256 cryptographic security directly inside your browser, establishing robust password and permissions enforcement.
PostgreSQL Row-Level Security
Workspace files and metadata are strictly partitioned using cryptographic database Row-Level Security (RLS), preventing multi-tenant data leaks.
Secure Authentication
User authentication is secured through Supabase Auth with salted bcrypt password hashing, secure HTTP-only session cookies, and PKCE flow enforcement.
Responsible Disclosure
If you identify a security vulnerability or potential risk within FolderBit, please report it privately to our team at security@folderbit.app. We investigate all legitimate security reports promptly and coordinate responsible resolution.