Zero-Knowledge Security Architecture
How ScanOrbit isolates sensitive documents, uses hardware-backed Keystore encryption, and processes files 100% on your Android device chip without cloud leaks.
The Security Guarantee
When you scan passports, contracts, tax returns, and medical records, confidentiality is non-negotiable. ScanOrbit is engineered on a local-first, zero-knowledge paradigm: documents, OCR text, and cryptographic keys exist only on your physical device hardware.
The 6-Stage Air-Gapped Data Pipeline
From optical camera capture to encrypted local storage.
1. Camera Viewfinder Frame Buffer
Camera frames are processed in volatile GPU/CPU RAM. No uncompressed image frames are written to public shared storage.
2. Local Edge & Perspective Warp
Native Google ML Kit C++ binaries detect document boundaries and correct perspective distortions entirely on-device.
3. On-Device Contrast & B/W Filter
High-contrast filters remove paper shadows and clean page typography without making external API calls.
4. Hardware-Accelerated Local OCR
Optical character recognition extracts text lines in local sandbox memory. Extracted text is never transmitted to cloud servers.
5. Local ISO-Standard PDF Rendering
PDF compilation uses pure memory-based data URIs to generate standard A4 PDF files without third-party web font queries.
6. AES-256 Vault & Keystore Encryption
Sensitive scans placed in the Vault are encrypted using AES-256-GCM. Decryption keys are managed via Android Keystore hardware.
Zero Telemetry & Ad Trackers
ScanOrbit contains zero advertising SDKs, zero marketing beacons, and zero behavioral tracking tools. Your usage data is completely private.
Minimal Android Permissions
Only the CAMERA permission is requested to scan documents. No location, contacts, microphone, or background network monitoring permissions are required.
Fully Air-Gapped & Offline Ready
Every core scanning and PDF creation tool operates seamlessly in Airplane Mode with Wi-Fi and mobile data completely disabled.
100% Data Sovereignty
You own your documents. When you delete a file, it is completely removed from local storage with no remote server remnants.
Vulnerability Disclosure & Security Contact
We welcome independent security audits and responsible vulnerability disclosures from security researchers.
To report security findings or cryptographic concerns, contact our security team directly at:
hello.scanorbit@gmail.comWe investigate all valid vulnerability reports within 48 hours and publish verified patches promptly.