CipherForces tools run client-side in the user's browser. The tools use browser-native processing such as pdf-lib, pdfjs-dist, tesseract.js, ffmpeg, canvas APIs, mammoth, and docx. These tools upload no file to a CipherForces server. Three documented tools are exceptions that use a rate-limited, SSRF-protected API route.