Tool data boundary
- Tool calculations run in the browser
- Keys and tool input are not included in analytics
- RSA private keys are never persisted
- Encryption tools do not replace production key management
Security
How JsonMind handles tool data, accounts and sensitive values.
Account security
Account and sensitive operations use a protected transport channel and server-side security controls. Session credentials are not exposed to page scripts, permissions are reloaded during authentication, write requests require a trusted source, and authentication, administration and public endpoints are protected by rate limits and abnormal-access monitoring. Specific safeguards are updated as risks evolve and are not all disclosed here.