Veil Home

Security & transparency

Veil, open to inspection.

The redaction core runs in your browser. Review its source, test a prompt, and check the boundary between local processing and connected services.

Where the data goes

Original text

The core receives text and custom terms in browser memory. It detects matches without calling a network service.

Local token map

Original values are mapped to placeholders. The web tool saves this map and custom terms in localStorage; the extension uses Chrome local storage.

Your AI service

The web tool lets you copy redacted text. The extension replaces detected text in supported chat inputs. Sending it is still a request to that AI service.

Local redaction does not mean a network-free website: account services, page assets, and error reporting can make requests. The AI website also runs its own scripts; Veil cannot guarantee they never see text entered there.

Local redaction check

Same core as the web tool
Custom term: Project Orion
Inspect the network yourself
  1. Open your browser developer tools and choose Network.
  2. Wait for page loading to finish, then clear the request list. Keep all request types visible.
  3. Enter a synthetic prompt above and run the local check. The redaction operation does not initiate a request.
  4. If other requests appear, inspect their payloads for your synthetic text. This check is not an independent audit or a guarantee about other scripts.

Read the core. Run the tests.

Download the current TypeScript engine, regression tests, architecture notes, and MIT license. The archive is generated from the app's source. It is a source release, not a published npm package or public gist.

Download core source

What this does not promise

  • Detection uses patterns and name heuristics, not complete understanding. It can miss information or redact harmless text. Review the output before sending.
  • The saved token map contains original values in readable form, not encrypted storage. Clear it in the web tool or use “Forget saved tokens” in the extension.
  • The extension is not an isolation boundary against scripts on the AI website, and automatic restoration changes that website's page content.
  • This is Veil's owner-authored technical description, not a certification, third-party audit, or Lovable-issued Trust Center.