Privacy-conscious by design
Wise Office separates local editing from server processing. Core document editing happens in the workspace; conversion/OCR/document operations use VersePDF-controlled processing paths. Wise automation is sandboxed rather than given unrestricted host access.
Self-hosted processing path
The production design reuses the project’s own backend, workers and local/private AI services instead of requiring documents to be sent to third-party AI model APIs for core processing.
Advertising boundary
Eligible free sessions may load Google advertising. Paid/ad-free entitlements suppress the ad loader through the existing plan policy. Advertising is kept outside Save, Download and document-control surfaces so it is not presented as a document action.
External services are explicit
If a user deliberately chooses a connected external service, that integration has its own data boundary. The core Wise Office editing and self-hosted processing architecture does not silently substitute a third-party provider.