Security & privacy
Your workbooks stay
on your device.
Choose a workbook and check it in your browser. The file is not uploaded, and the original is not changed.
Your workbooks
Checked on your device.
Your browser reads the file and produces the findings. This is the same for Free and Pro, including batch inspections.
Workbooks, findings and review logs are not sent to our account service, Stripe or Resend.
Free single-file inspection needs no account or sign-in.
Inspect a workbook free →Your Pro account
Handled separately.
- Sign-in and subscription
- The account service manages your sign-in details and subscription records. It tells the inspector whether Pro access is active.
- Payments through Stripe
- Stripe handles checkout, invoices and billing details. Card details are entered on Stripe’s pages. Our account service keeps billing references and subscription status.
- Account emails through Resend
- Resend receives your email address and verification or password-reset link to deliver the message. Your password and workbook content are not included.
Separate servicesWorkbook inspection runs in your browser. The website and Pro account service run on a Hetzner server, with Cloudflare providing domain services. Stripe handles payments and Resend delivers account emails. These services do not receive your workbooks or inspection reports.
You choose what to keep and share.
Your files and inspection results stay in the browser until you choose to save a report or review log.
Save when you need to
The application does not automatically save workbooks, findings or review logs. Download anything you want to keep before closing or clearing the session. The sensitive-search setting can be remembered.
Review before sharing
Reports leave out matched sensitive values. File names, worksheet names, paths and reviewer details can still reveal information, so check a report before sharing it.
See what was checked
Each report includes the findings and coverage details, including anything that could not be inspected. Collapsing or filtering the screen does not remove results from your export.
If you need more detail
How this works.
How can I check that inspection stays local?
The inspector’s browser security policy blocks network connections during inspection. No analytics or session replay is included in the inspector.
- Open the inspector and your browser’s developer tools.
- In the Network panel, select the page request and look for
connect-src 'none'in its Content-Security-Policy response header. - After the page has loaded, clear the Network panel.
- Inspect an invented workbook and export its report. Those actions should create no HTTP or WebSocket requests.
Loading pages needs the site connection. Sign-in, account emails and billing use their separate services. This check covers inspection and report export; it does not control other browser extensions or software on your device.
Does the inspector run anything inside my workbook?
No formulas, macros or embedded files are executed, and links inside the workbook are not followed. The inspector reads supported stored content and reports where further review is needed.
Inspection scope and terms
Open “Terms of use” in the inspector for the current usage wording and scope. Each report includes its coverage record and package inventory. Inspection supports your review; it is not a safety certificate, malware scan or legal compliance assessment. Some workbook features and display behaviour cannot be fully interpreted. Check the coverage details in your report for the specific limits that apply.
Accessibility
The interface is designed for keyboard use, visible focus, labelled controls and narrow screens. Colour is accompanied by text. A formal accessibility audit and published conformance statement are still pending.
Procurement and DPIA support
A security note and a template to support a data protection impact assessment (DPIA) are planned. This page describes the current build and can inform your organisation’s own review.
Review records and identity
Reviewer names and timestamps are self-declared. Review logs include file hashes, inspection details and decisions; they are not digitally signed or authenticated. Signing in to Pro unlocks the workflow, but does not authenticate a reviewer’s sign-off. Imported logs do not replace a fresh inspection.
Contacting us
Team enquiries go to info@42analytics.co.uk. Send a description of your workflow; you do not need to attach a workbook.
Try it with one workbook.
All supported checks and the full single-file report, without an account.