Question 1

Is my file ever uploaded to a server?

Accepted Answer

No. Every parser runs entirely in your browser using JavaScript and WebAssembly. File contents are never transmitted anywhere. Only opt-in usage metadata, never file contents, may be logged.

Question 2

What file types does DocScan support?

Accepted Answer

PDF, DOCX/DOC, XLSX/XLS/XLSM, PPTX/PPT, HTML, CSV, XML/SVG, RTF, HAR, JAR, ZIP/TAR/GZIP/BZIP2/XZ, 7-Zip/RAR, env/config/credential files, PEM/keys/certificates, EXE/DLL/SYS (PE), ELF binaries, Mach-O, and PCAP/PCAPNG network captures. Any other file type still gets a generic secret scan.

Question 3

What is Format Spoofing?

Accepted Answer

DocScan checks a file's actual byte signature against its file extension. A renamed or disguised file, such as an executable saved with a .pdf extension, is still identified correctly and flagged as a Format Spoofing finding.

Question 4

Does DocScan detect malware?

Accepted Answer

No. It reports structural and behavioural signals as things to weigh, not verdicts, and does not attempt malware-family identification or scoring.