MaskLayer Studio
No content loaded. Upload a dataset or try an example to run detection.SECURITY & PRIVACY
Local-first redaction boundaries
Local-first redaction boundaries
Local-first redaction boundaries
MaskLayer treats uploaded datasets as sensitive training material. Detection, review, preview generation, and export preparation run locally in the browser so unresolved risk stays visible before a bundle is created.
MaskLayer treats uploaded datasets as sensitive training material. Detection, review, preview generation, and export preparation run locally in the browser so unresolved risk stays visible before a bundle is created.
Processing scope
Dataset text, detected findings, review decisions, redaction modes, preview output, and report metadata are handled in the workspace session.
Dataset text, detected findings, review decisions, redaction modes, preview output, and report metadata are handled in the workspace session.
Local-first processing
Parsing, detection, review, preview, and export preparation run in browser state. No account or persistent dataset storage is required by default.
Parsing, detection, review, preview, and export preparation run in browser state. No account or persistent dataset storage is required by default.
No model handoff
Uploaded data is not sent to a model or external API by this workspace, and uploaded data is not used to train models by this component.
Uploaded data is not sent to a model or external API by this workspace, and uploaded data is not used to train models by this component.
Temporary session data
Data remains available until the page reloads, the workspace is reset, or the current dataset is cleared. Production storage decisions should be explicit and auditable.
Data remains available until the page reloads, the workspace is reset, or the current dataset is cleared. Production storage decisions should be explicit and auditable.
Sensitive mapping protection
Stable token mappings can reveal original sensitive values. They stay local/session-only and are never included in exports unless the mapping bundle is explicitly enabled.
Stable token mappings can reveal original sensitive values. They stay local/session-only and are never included in exports unless the mapping bundle is explicitly enabled.
Basic threat model
Primary risks: token mapping exposure, shared browser/session access, accidental export of unresolved high-risk values, and future server/API processing without encryption, retention controls, or audit logs.
Primary risks: token mapping exposure, shared browser/session access, accidental export of unresolved high-risk values, and future server/API processing without encryption, retention controls, or audit logs.