Local-Browser Data Privacy & Zero-Upload Architecture Spec

2. Four Client-Side Privacy Controls (Finance, Tax & Property Ops — Vendor W-9/1099s & Tenant Leases)

Governance Alignment: GLBA / IRS Pub 4557 Taxpreparer Data Security & SOC2 Vendor Minimization

• 100% Client-Side Browser Memory Execution: Both your blank AcroForm PDF template and your CSV spreadsheet are read locally via the browser FileReader API into ephemeral ArrayBuffer memory—never POSTed to any server.
• Zero Cloud Storage, Zero Database Persistence & Zero AI Training: FormBatch does not upload, cache, log, or index your document templates, spreadsheet cells, or generated output PDFs on OnBits infrastructure.
• Strict Separation of Pass Verification from Document Processing: Only your 30-Day Pass token (or Stripe Checkout session ID) communicates with the server on page load; the actual 250-row CSV-to-PDF merge and ZIP packaging execute entirely offline-capable in your browser tab.
• Immediate RAM Reclamation on Tab Close: Generated ZIP archives are streamed directly to your local disk via a temporary Blob URL (URL.createObjectURL) and purged from browser memory the moment the tab is closed or refreshed.

60-Second Browser DevTools Network Verification

• Step 1 — Open Chrome/Edge DevTools (F12 → Network Tab) on https://formbatch.onbits.net/ and clear the network log.
• Step 2 — Select your local fillable AcroForm PDF and a sample 5-row CSV file containing synthetic test records (vendor_legal_name, ein_or_ssn_masked, routing_aba_last4, annual_1099_compensation, street_address) and click 'Generate Batch ZIP'.
• Step 3 — Inspect the Network tab: confirm zero HTTP POST/PUT requests are transmitted during PDF field mapping, rendering, or ZIP archive download (0 bytes of CSV/PDF egress).

Paste directly into your internal IT security review ticket, HIPAA privacy log, or vendor procurement questionnaire:

INFOSEC & DATA PRIVACY ARCHITECTURE MEMO — FORMBATCH (ONBITS.NET)
==================================================================
Workflow Scope:        Finance, Tax & Property Ops — Vendor W-9/1099s & Tenant Leases
Regulatory Alignment:  GLBA / IRS Pub 4557 Taxpreparer Data Security & SOC2 Vendor Minimization
Sensitive Columns:     vendor_legal_name, ein_or_ssn_masked, routing_aba_last4, annual_1099_compensation, street_address
Planned Volume:        250 PDF packets (1 local batch run(s) at up to 250 rows/run)
Server Data Egress:    0 Bytes (100% Client-Side Browser ArrayBuffer / Blob Execution)

1. TECHNICAL EXECUTION SUMMARY
   FormBatch (https://formbatch.onbits.net/) performs CSV-to-PDF AcroForm mail merge and ZIP
   packaging strictly within the operator's local web browser memory. Neither the source PDF
   template nor the CSV rows containing sensitive records (vendor_legal_name, ein_or_ssn_masked, routing_aba_last4, annual_1099_compensation, street_address)
   are transmitted to OnBits.net servers or third-party cloud storage.

2. NETWORK & TELEMETRY BOUNDARY
   - Document & CSV Payload Uploaded to Server: NONE (0 Bytes)
   - Persistent Cloud Storage of Output PDFs:   NONE (Direct local Blob download)
   - License / Pass Check:                      Stateless pass token validation only
   - Billing & Receipt Processing:              Stripe Checkout ($49 one-time 30-day pass)

3. INDEPENDENT VERIFICATION
   Security reviewers can verify zero network egress in under 60 seconds using browser
   DevTools (Network tab) with the free 5-row preview at https://formbatch.onbits.net/.