SECURITY & TRUST

Security & Privacy Architecture

How DEVRIAN protects your code, tokens, and sensitive data through browser-native memory sandboxes, strict network isolation, and verifiable Row Level Security.

Privacy-First by Design

DEVRIAN utilities run 100% in your local browser memory. Sensitive inputs like JWT tokens, API keys, JSON payloads, and database dumps are never transmitted to or stored on DEVRIAN servers.

Execution Boundary & Data Perimeter

100% Client-Side Payload Sandbox

CLIENT BROWSER SANDBOXLocal Memory

Zero Payload Telemetry

✓JSON, JWT, Hash, Base64 run in WASM/JS memory
✓Zero server-side payload logging or caching
✓All transformations execute on local CPU threads

CLOUD STATE BOUNDARYIsolated Persistence

PostgreSQL Row Level Security

•TLS 1.3 encryption in transit
•Supabase Auth session token isolation
•Strict auth.uid() = user_id kernel filter

Perimeter Policy: Client data never leaves memory unless explicitly exported by userArchitecturally Enforced

1. Zero-Trust Client Execution

Traditional online utilities send user input payloads to backend cloud servers for processing. DEVRIAN eliminates this attack surface entirely by executing all utility operations (formatting, decoding, validation, hashing, and generation) inside your browser local runtime environment.

When using utilities like JSON Formatter, JWT Debugger, or Base64 Encoder, zero network requests containing your input payload are dispatched. Your data remains strictly within your device memory.

2. Database & State Isolation

For users with optional authenticated accounts, persistent workspace configurations (such as pinned tools and layout preferences) are managed via Supabase PostgreSQL.

Tenant data isolation is enforced at the database kernel layer using strict PostgreSQL Row Level Security (RLS) policies. Every user-owned table isolates tenant records using auth.uid() = user_id predicates, preventing cross-tenant leakage even in the event of application-layer bugs. All client-to-server communications require TLS 1.3 encryption in transit.

3. Vulnerability Disclosure Policy

We welcome security researchers and developers who discover potential vulnerabilities to disclose them responsibly. If you identify a potential security issue, please contact our security team directly:

security@devrian.comSend Disclosure Report ↗

We aim to acknowledge all verified vulnerability reports within 24 hours.

Related: Privacy PolicyQuestions? Contact Security Team