# Oryseal security model

Oryseal processes selected file bytes and decryption keys in the current browser workflow. It does not provide an upload endpoint, remote cryptography endpoint, account system, analytics endpoint, or hosted key vault.

The active browser, extensions, operating system, served JavaScript, and local downloads remain part of the trust boundary. Keep the original file until a test decryption succeeds. Losing the only valid key can make the capsule unrecoverable.

See `/security`, `/security/implementation`, and `/security/profiles` for the full browser workflow and current profile status.