Security and disclosure.

DNM runs on your PC. Internet access supports trial or license activation, periodic license verification, and update checks or downloads, without uploading your files. This page documents how it is built, what we protect, what stays yours to protect, and how to report a vulnerability.

Report a security issue How DNM is built

Architecture and network activity

DNM is a standalone Windows desktop application. Naming, previews, optional OCR and Recovery Vault run on your PC. Licensing and updates use online services, but documents are not uploaded for naming. DNM stores its settings, caches and Recovery Vault under %LOCALAPPDATA%\Falcrex\dnm\. Saved files and exports go to the work folders you select.

Licensing and update network activity

Trial or license activation and periodic verification. HTTPS requests process the license/account and device information needed to keep your trial or license valid, as described in Privacy and Sub-processors.
Update checks and downloads. DNM can check for a newer release over HTTPS. In-app update downloads are not currently available; use the current signed installer from our Download page instead.

These requests do not upload your file names, folder paths, or file contents. There is no usage telemetry, so we cannot see what you rename, when, or how.

What this rules out

No cloud sync and no automatic backup to our servers
No cloud AI. Smart Suggest is deterministic and runs offline
No uploading of documents for OCR or preview
No profile of your activity inside the app

For the plain-language version of what stays local, see the trust page.

Encryption, storage, and what is yours to protect

Licensing and update endpoints use HTTPS. DNM does not encrypt its app-data folder; consider full-disk encryption such as BitLocker for PCs handling confidential files. Recovery Vault retention is configurable up to seven days and subject to settings, storage limits and file eligibility. It is an undo mechanism, not a backup.

Because DNM runs entirely on your machine, most of what protects your files is under your control, not ours: the device itself, your Windows account and administrator credentials, your backups, the folders you point DNM at, and anything you export. We cannot reach your files, which also means we cannot recover them for you.

On certifications

We are not SOC 2 or ISO 27001 certified. DNM processes documents locally, reducing exposure to hosted document processing. Your organization may still need to assess licensing, updates, suppliers and device security. Use this page as architecture information, not a substitute for your security review.

Third-party components

Required notices and attributions ship in the THIRD-PARTY-NOTICES file distributed with the software.

The cloud services behind the website, payments, and installer delivery are separate from these bundled components; each one is listed with what it touches on the sub-processors page.

Componentswhat they do

CryptlexLicense activation and validation. Processes license/account and device information needed for licensing, as described in Privacy and Sub-processors. DNM does not upload your document contents or filenames for these checks.

Local OCR engineOptional on-device text extraction, used only as a naming hint. Runs on your PC and sends nothing

Coordinated vulnerability disclosure

If you believe you have found a security vulnerability in DNM or on this website, report it to privacy@falcrex.com with enough detail to reproduce it. Please do not use the general contact or support forms for security issues.

How we handle it

We acknowledge and triage reports on a reasonable efforts basis
We work with you to validate, rank by severity, and build a fix
We ask for a reasonable opportunity to remediate before you publish, and we will coordinate timing so users can update first
With your permission we credit reporters in the release notes
We do not run a paid bug bounty

What to send

Steps to reproduce the issue
The affected DNM version and your Windows version
The impact, plus any proof of concept needed to show it

Never include real file contents, client documents, or anything confidential in a report. DNM handles other people's files, so a reproduction case should use files you created for the purpose.

Scopewhat we will and will not act on

In scopeThe DNM Windows application, this website, and the free browser tools

Out of scopeThird-party services we rely on, social engineering of staff or users, physical attacks, and denial-of-service testing

Response targetWe aim to acknowledge within 5 business days. That is a good-faith goal, not a contractual service level agreement

Safe harbourTest only against your own installation. If you make a good-faith effort to follow this policy and stay in scope, we will not pursue or support legal action against you for your research

Updates and supported versions

Security fixes ship in the current release. The current signed installer is available on our Download page for you to install when you choose. We support the current shipping version. Older builds, altered installations, and unsupported environments are not covered, and we may require an update before we can help with a security report.

The installer is code signed. If a download does not show a valid Falcrex Systems Inc signature, do not run it, and tell us at privacy@falcrex.com.

End of documentSee also: Terms of Service · Privacy Policy · EULA · Support and Updates Policy · Sub-processors

Found a security issue?

Email us directly. A founder reads it. We will work with you on timing so users can update before anything goes public.

Email privacy@falcrex.com