Privacy and Security Architecture

Summary

Privacy and security architecture covers encryption, prompt-injection defenses, PII protection, email privacy, and sensitive-data redaction. This index groups implemented docs that used to be split across privacy and core security folders.

Privacy Docs

• PII Protection – client-side PII detection and anonymization.
• Prompt Injection – defense-in-depth against prompt injection.
• Sensitive Data Redaction – redacting PII before LLM processing.
• Email Privacy – client-side email encryption.
• Privacy Promises – public privacy guarantees and implementation notes.

Security Docs

• Security – zero-knowledge encryption and Vault key management.
• Encryption Architecture – encrypted storage architecture.
• Chat Encryption Implementation – chat encryption implementation details.
• Passkeys – WebAuthn/PRF implementation details.

Related

• Architecture – full architecture index
• Data and Sync – multi-device synchronization