| File Ingestion & Storage | Zero server packets. Executed in local sandbox RAM. | Transferred to AWS/GCP buckets; stored on disk for 1–24 hours. | Cloud files remain vulnerable to misconfigured S3 access control lists. |
| HIPAA Health Records (PHI) | Safe Harbor compliant (45 CFR § 164.312). Data never leaves workstation. | Requires an executed BAA. Without one, uploading violates federal rules. | Civil monetary penalties from $137 to $68,928 per unauthorized cloud disclosure. |
| Taxpayer Identity (IRC § 7216) | Complete immunity. No server transmission or logs. | Server access logs capture IP addresses, timestamps, and input values. | Misdemeanor criminal liability ($1,000 fine and up to 1 year jail per event). |
| Text Stream Extraction | Direct UTF-8 stream inspection; zero rendering artifacts. | OCR translation layers introduce character substitutions and spacing errors. | Over 70% of two-column layouts scramble text when processed by enterprise ATS. |
| Subpoena & Discovery Exposure | Zero records retained. Nothing exists to produce. | Subject to Stored Communications Act (18 U.S.C. § 2703) warrants. | Cloud vendors can be legally compelled to turn over cached copies without notice. |