Analyt.me: A Browser-First Privacy Architecture for Local Document and Data Processing

Analyt.me is a browser-first document and data workspace designed to process supported PDF, image, spreadsheet, and analytical workloads locally within the user's browser while separating identity, billing, support, and administrative metadata into controlled server-side services. This technical report presents the architecture and production implementation of Analyt.me, including its local file-processing model, JavaScript Web Workers and WebAssembly execution, PDF and image workflows, spreadsheet analytics with DuckDB-WASM, Supabase authentication and PostgreSQL RPC boundaries, Cloudflare Turnstile verification, Razorpay subscription billing and webhook reconciliation, Resend email integration, security controls, deployment lifecycle, and disaster-recovery strategy. The central architectural principle is the separation of two data planes: a local file plane, where supported user-selected document contents remain inside browser memory during processing, and an online service plane responsible for durable account, billing, entitlement, support, and authorization state. Version 1.0 documents the production architecture and acceptance evidence available as of 25 October 2026. The report does not contain production secrets, passwords, access tokens, raw customer records, or private customer document contents. It should be interpreted as a technical architecture and implementation report rather than as a formal proof of security or an independent security certification. Production site: https://analyt.me DOI: https://doi.org/10.5281/zenodo.23635938