Your developer data deserves careful handling

What happens without AI

Format detection, parsing, validation, formatting and minifying are implemented as deterministic code that runs in your browser. No AI is involved in any of them, and using them does not send your input to an AI provider.

SQL, cURL and shell commands are treated as text. DocuFormat formats shell commands. It does not execute them. It never executes a pasted SQL statement, never runs a pasted cURL command or makes the request it describes, and never runs a pasted shell command.

What happens when you use AI

• AI only runs when you click AI Fix or Explain.
• The first time in a session, DocuFormat shows a notice that your content will be sent to an external AI provider and asks you to confirm.
• The request goes from your browser to DocuFormat’s server, which forwards it to the AI provider (currently Anthropic). Your content, the format, any local validation messages and, for SQL, the chosen dialect are included.
• Secrets are not redacted. Remove tokens, passwords and keys before using an AI action.
• AI requests are limited to 512 KB.

What the server records

DocuFormat’s server is built so that, for AI requests, it logs only the method, route, response status, duration and the size of the request body. Request bodies, headers and upstream error bodies are not logged. Error messages returned to the browser do not echo your content.

What the AI provider does with data it receives is governed by that provider’s own terms and policies.

This website

This marketing site is static pages. It sets no cookies, loads no third-party scripts and includes no analytics.

Questions, answered