Private where it can be, verified where it counts
Filing Reader splits every question two ways. Explanations run on your device and never leave it. Number questions send only the matched excerpts to a cloud model — and even then, the model isn't trusted to do the arithmetic.
🔒 Stays on your device
- The whole PDF. Parsed, chunked, and embedded in your browser with pdf.js and a small embedding model.
- Every explanatory answer. A WebGPU model runs locally — "what does the filing say about…?" never touches a server.
- Your document library. Loaded filings live in the tab, not in any cloud store.
☁️ Leaves your device
- Only the retrieved excerpts — a handful of passages — never the full document.
- Only for number questions that need computation or cross-document comparison.
- To a zero-data-retention endpoint that does not train on inputs. We store your email and a usage counter — nothing else.
The model proposes the math. A sandbox computes it.
A language model can misremember a number. So it's never allowed to. Instead it returns an arithmetic expression built only from figures in the excerpts — and a deterministic evaluator in the Worker computes the result. No eval, no code execution: numbers, + − × ÷ **, and parentheses only. A hallucinated total physically can't reach you, and a malicious "expression" is rejected, not run.
(60922 − 16621) / 60922 × 100→
sandbox computes 72.72%→
shown with a citation
Questions
Do you ever upload my filing?
No. Parsing, chunking, and embedding all run in your browser. There is no server-side PDF store, no cloud backup, and no code path that uploads the file.
What exactly leaves my device for a cloud question?
Only the few passages retrieved as relevant to that question — never the whole document — plus the question text. They go to a zero-data-retention model that doesn't train on them.
Can I use it fully offline / anonymously?
Yes. Load an on-device model and set Routing to "Local only." That path is unlimited, needs no account, and never contacts a server after the model has downloaded.
What do you store about me?
Your email and name (from Google sign-in) and a per-day cloud usage counter. No document text, no excerpts, no questions.
Informational only — not investment advice. Accuracy across all real filings isn't certified; verify important numbers against the source, which is exactly why every answer links to it.