Security and privacy

Captured company content stays under the user's control.

Bundlepix is designed to perform its core capture, review, redaction, optional OCR, recording, and export work on the Windows PC—not in a Bundlepix cloud service.

  • No Bundlepix cloud upload
  • No product telemetry
  • No desktop account required

Local-first processing

Core evidence work runs on the local machine.

Screen, window, region, and scrolling capture; image stitching; annotation; permanent blackout; optional OCR; recording; and export are designed to run locally. Bundlepix does not upload captures, exports, OCR results, recordings, or product-usage telemetry to a Bundlepix-operated service.

Users choose where exported files are saved and how they are shared. A user-selected folder, company sync tool, backup product, clipboard manager, or destination application remains outside Bundlepix’s control.

This website

No visitor analytics in the website code.

The website code includes no analytics service, tracking pixels, advertising scripts, or session recording. It sets no cookies of its own and stores no form data, because it renders no forms. The hosting provider processes requests to deliver and protect the site and may retain operational logs or set bot-management cookies. This is separate from the desktop app’s local processing of captured content.

Evidence integrity

A partial capture should be identified—not silently presented as complete.

Bundlepix checks full-page capture against the pixels that actually landed and records how each capture was produced. When it cannot verify a complete result, it requires review and identifies the result as partial instead of presenting it as complete evidence.

The hash-chained local audit trail lets a reviewer check that a file has not changed since Bundlepix wrote it, using the exported chain of custody and standard SHA-256. This assurance does not extend to a machine that was itself compromised. File integrity does not establish that the captured information was true; important captures still require human review.

Redaction lifecycle

Permanent blackout changes the current saved evidence after replacement succeeds.

Blackout is applied to captured pixels before optional local OCR and export. A replacement becomes the current evidence only after the updated DOCX, PDF, or XLSX artifact is saved successfully; a failed or cancelled replacement leaves the prior artifact in place.

Redaction cannot retroactively erase copies made earlier, version history, backups, cloud-sync history, application caches, swap or process memory, or content retained by third-party clipboard tools. Teams should control those systems separately.

Optional local tools

OCR and media features have explicit third-party boundaries.

Tesseract OCR

Optional OCR requires a separately installed Tesseract executable. Bundlepix passes an in-memory image to that local process; Tesseract still uses ordinary process memory while it runs.

Browser full-page capture

A capture states whether it came from your own signed-in browser tab, a public page render, or a stitched visible window. A public page render does not prove signed-in state. The browser still makes the normal network requests needed to load the page; this is distinct from Bundlepix telemetry.

Recording conversion

Compatible recording and GIF operations can depend on local media tooling. Recording remains separate from the screenshot-to-document workflow.

Safe use

Review content and destination controls before sharing.

  • Capture only content your team is authorised to retain
  • Black out confidential values before OCR or export
  • Review every output for completeness and remaining sensitive data
  • Store finished files in an approved company location
  • Keep the ticket, test case, or document system as the source of record
  • Report security concerns privately through your supplied support channel

Guided product evaluation

Explore Bundlepix for your workflow.

Describe what your team captures, documents, trains, or hands over today. Bundlepix will map the supported capabilities to your workflow and outline a practical next step.