Skip to content

Security: mauryaankur99/FastFiller

Security

SECURITY.md

Security & Privacy Policy

🛡️ Zero-Cloud Architecture Guarantee

FastFiller is strictly client-only. It contains:

  • No external telemetry services.
  • No intermediate cloud proxies.
  • No analytics or session recording scripts.
  • No centralized credential stores.

All API keys, profile templates, and configuration options are saved directly in your browser's sandboxed chrome.storage.local. Non-sensitive prompt payloads travel directly from your browser to your selected AI endpoint under that provider's privacy policy.

🔒 Sensitive Data Recommendation: FastFiller automatically excludes passwords and credit card fields from being filled on web pages. Do not paste national ID numbers (such as SSN, Aadhaar, or PAN) into profile resume text unless connecting to Local Ollama (which guarantees 100% offline, on-device inference with zero network transmission).


🔒 Reporting a Security Vulnerability

If you discover a potential security vulnerability or credential leak vector in FastFiller, please do not open a public issue.

Instead, report it responsibly to the core maintainers:

  • Email: security@aeigs.com
  • Lead Maintainer: Maurya Ankur (LinkedIn)
  • Systems Architect: Singh Sanjiv (LinkedIn)

We will acknowledge receipt within 48 hours and work with you to release a patch promptly.

There aren't any published security advisories