MUTATUM ARCHITECTURE // PRIVACY_AND_ZERO_SURVEILLANCE_POLICY
ZERO_SERVER_STORAGE • CLIENT_SIDE_ISOLATION • SOC 2 READINESS
⚖️
MUTATUM
SOVEREIGN V2.4
← Return to Home ⚡ Launch App
← Return to Public Manifesto
Zero-Surveillance Architecture Specification

Privacy Policy

Effective Date: October 12, 2026 • Classification: Public Consumer Protection Utility • Security Standard: SOC 2 Type II Alignment
The Zero-Knowledge Pledge:
Mutatum operates with zero backend databases and zero surveillance telemetry. All credit report parsing, debt calculations, statutory deadline matching, dispute generation, and court pleading formulation take place entirely inside your web browser’s local sandboxed memory. No consumer account number, debt balance, credit score, or personal identifying information is ever transmitted to, stored on, or monetized by our web servers.
01

Architectural Foundation: Pure Client-Side Execution

Unlike commercial credit repair mills and debt relief aggregators that ingest user social security numbers, banking logins, and credit files onto central cloud databases, Mutatum was engineered from the ground up as a pure client-side utility:

  • Zero Server-Side Data Ingestion: The web server delivering Mutatum acts strictly as an immutable static file host over TLS 1.3 encryption. It accepts no POST requests, maintains no SQL or NoSQL database of consumer accounts, and has no API endpoints capable of receiving personal credit reports.
  • Client-Side Optical & Regex Parsing: When you paste or upload an Experian, TransUnion, or Equifax credit report, all extraction is processed exclusively by in-memory JavaScript execution running locally on your hardware.
  • No Cookies or User Profiling: We do not issue tracking cookies, session cookies containing personal information, or fingerprinting scripts.
02

Local Storage and Client Memory Controls

All state management within the Mutatum application is confined strictly to your device's browser sandbox:

  • Ephemeral Session Memory: By default, calculations live in volatile RAM memory during your active browser tab session.
  • Browser localStorage (Optional Persistence): If you choose to save your debt docket for future review, records are saved strictly to your browser's private localStorage partition, inaccessible to external websites.
  • Instantaneous Sovereign Data Wipe: The application features a prominent "Reset / Clear All Memory" button. Clicking this executes a complete purge of local storage and cache, leaving zero trace on your device.
03

Air-Gapped and Offline Independence

Mutatum provides a complete standalone offline download option ("Download Standalone App .html"). Users may download this single, self-contained HTML/CSS/JS file, disconnect their machine from the internet or transfer it to a USB drive, and perform full debt analysis, court pleading formulation, and letter generation in a 100% air-gapped environment.

04

SOC 2 Type II Security Principles & Infrastructure

Mutatum aligns with the Trust Services Criteria established by the American Institute of Certified Public Accountants (AICPA):

  • Confidentiality: Because consumer data is never transmitted across the network, confidential personal financial records are mathematically protected from data breaches, man-in-the-middle interception, and government subpoenas directed at our hosting infrastructure.
  • Integrity: All document generation logic, affirmative defense statutory algorithms (e.g., 735 ILCS 5/13-205), and FDCPA § 1692g citations are validated against codified statutes and run deterministically.
  • Infrastructure Hosting: Assets are served via Hostinger enterprise cloud infrastructure utilizing hardened HTTP/3 and TLS 1.3 transport security, strict Content Security Policies (CSP), and automated DDoS mitigation.
05

Absolute Prohibition on Data Brokerage & Monetization

The entire credit repair and consumer debt industry is plagued by predatory affiliate networks that sell distressed consumer leads to high-interest lenders, debt settlement consolidators, and junk debt collection firms. Mutatum operates under a strict non-commercial public mission:

  • We do not sell, rent, monetize, or disclose any user information to any third party.
  • We have no advertising networks, marketing pixels (Meta, Google, TikTok), or affiliate partnerships.
  • We receive zero kickbacks or referral fees from lenders, attorneys, or settlement companies.
06

Third-Party Scripts & Sub-Processors

Mutatum utilizes zero third-party behavioral analytics, zero external CDNs for personal data handling, and zero tracking tags. Standard web fonts are loaded from Google Fonts via privacy-preserving caching, or can be bypassed entirely by utilizing the standalone offline file.

07

Governing Inquiries & Security Contact

If you have questions regarding Mutatum's cryptographic zero-knowledge architecture, air-gapped security models, or SOC 2 alignment protocols, contact the engineering and security team at:

Security & Governance Desk: security@expeditum.dev
Infrastructure: Hostinger Cloud • Chicago & Midwest Operations
Project URL: https://mutatum.expeditum.dev
SOC 2 Type II Security Standard In Progress
Continuous Audit Readiness • Zero-Knowledge Architecture • Client-Side Data Protection
Hostinger Cloud Infrastructure
TLS 1.3 Encryption • On-Device Sandboxed Memory
MUTATUM — Sovereign Debt Defense & Credit Transformation
SOC 2 (In Progress) • Privacy Policy • Terms of Service • Acceptable Use Policy