Security and privacy of SimilDoc

SimilDoc reads your documents and sorts them without anything leaving your computer. That is not a promise you have to trust: it is how the app is built, and you can check it yourself.

Guaranteed by design

Your privacy does not depend on trusting us

SimilDoc has no server. We are not promising not to look at your files: there is nowhere for them to be sent. The whole analysis runs on your machine, start to finish. And we do everything reasonable to keep it safe: the code went through an audit, and the guarantees below are verified, not merely promised.

What the program guarantees

The audit is ours, done on the code itself. It is not a third-party seal: it is a review you can hold against what the app actually does on your machine.

  • Nothing leaves your machine

    Zero network calls anywhere in the app. The download compares the text of your documents and nothing else. A separate module can also compare by meaning, and it is not included: if you install it, it starts behind a switch that keeps it offline, and if its model is not already on your computer the local engine is used instead of reaching out.

  • It never deletes or overwrites

    It only copies or moves. If a name is taken, it adds “(2)” instead of replacing anything. When moving, it removes only the subfolders left completely empty, never one that still holds something.

  • A preview before your disk is touched

    You see every group and where each file would go. Nothing is written until you confirm.

  • Hardened paths

    It resists “../” path tricks, refuses shortcuts pointing outside the folder you chose, and will not write into system folders. The check runs again at the moment of writing, not only while planning.

  • It refuses decompression bombs

    A Word document is really a compressed archive, and a small one can hide gigabytes inside. Before opening it, SimilDoc adds up how much it would expand to and refuses it if that would cross the memory limit, without decompressing anything. That file goes to “No legibles” and the analysis carries on.

Check it yourself, take nothing on faith

  1. Disconnect from the internet and use SimilDoc. It works the same. That is the proof there is no server behind it.
  2. Verify the SHA-256 fingerprint published next to each download: it confirms the file you got is exactly the one we built.

The first time you open it

SimilDoc is independent and we do not pay for a signing certificate, so Windows or Mac will warn you once that the app is not verified. That is normal for independent software, not a sign that something is wrong. Check the SHA-256 fingerprint and open it with “Run anyway” or “Open Anyway”. It only happens the first time.

This website too

The page you are reading uses no cookies, no analytics and no third-party fonts or scripts. It carries only security headers: HSTS, a content policy, and protection against being embedded elsewhere.

Notice

By using SimilDoc you acknowledge that, like any software that reads documents, it relies on third-party open source libraries, for instance to read PDF and Word files. We do everything reasonable to keep it safe: we audit the code, harden it and refuse dangerous files such as decompression bombs. Even so, we cannot guarantee absolute immunity to an unknown flaw in those third-party components. SimilDoc is provided as is, without warranties, under its license.

Found a security problem?

Write to us with enough detail to reproduce it. We answer, and we tell you what we are going to do about it.