Security & Data Protection
Enterprise Grade Security • Zero-Knowledge Document Privacy • 2026 Standards
1. Offline-First Privacy Architecture
Unlike conventional cloud document platforms, Rixoffice is engineered from the ground up to keep your documents entirely on your physical machine. When you author text in RixDocs, crunch financial tables in RixSheets, or design slides in RixSlides, the files reside on your local storage drive. There is no forced cloud telemetry and no silent background upload of your intellectual property.
2. Zero-Knowledge Document Handling
Our servers have no mechanism to read, index, or decrypt your personal files. Your documents, spreadsheets, PDFs, and presentations are not used to train global foundation models, are never logged, and are never shared with advertising networks or third-party brokers.
3. Cryptographic Standards & In-Transit Security
For services that interact with the network (such as account licensing, subscription verification, and remote AI completions): • All communications are encrypted using modern Transport Layer Security (TLS 1.3). • Edge protections via Cloudflare mitigate DDoS attacks, malicious probing, and automated scraping. • Authentication tokens are signed with cryptographic SHA-256 JWTs and verified authoritatively before any database record is accessed.
4. Sandboxed Desktop Application Runtime
Our desktop applications for Windows, macOS, and Linux are isolated using modern operating system sandboxing primitives. File system operations are scoped to directories you explicitly open. Local AI features running through Ollama or custom GGML weights communicate exclusively over localhost loopback sockets (127.0.0.1) without transmitting payloads outside your local network.
5. Bring-Your-Own-Key (BYOK) Security
Users who configure custom API keys for OpenAI, Anthropic, or Google maintain direct client-to-provider connectivity. Your API keys are stored locally on your device within encrypted OS credential storage (such as Windows Credential Manager or macOS Keychain) and are never stored on Rixoffice central servers.
6. Vulnerability Disclosure & Bug Bounty
We welcome responsible security research. If you discover a vulnerability in our web application, desktop software, or API endpoints: • Email: security@rixcart.com • PGP Key: Available on request. • Please allow reasonable time for remediation before public disclosure. We acknowledge and reward qualifying security findings.