Accept customer data. Never route it through us.
CSVbox Private Mode parses, validates, and maps files in the user's browser — then posts clean rows directly to your API. Zero rows ever hit CSVbox servers.
- 15 min to live
- SOC 2 + GDPR
- Private Mode available
- Security review flagged your importer vendor because "files touch their infra."
- Your customers' data includes SSNs, personal records, or financial details you can't route through a third party.
- You need SOC 2 and GDPR alignment, and your current importer forces a DPA conversation every quarter.
How Private Mode works
The widget runs client-side. File parsed, mapped, validated in-browser. CSVbox never sees a row.
Including the free tier. No enterprise gate, no line item.
Pick your region. Relevant even when you do route data through CSVbox.
Bootstrapped, so we don't need it. Written into the terms.
CSVbox helped us quickly add CSV imports without building it ourselves — simple, efficient, and just works.
- SOC 2 Type II
- GDPR
- AES-256
- TLS 1.3
- US / EU residency
- Private Mode
- No AI training
Private Mode — data stays in the browser
<script src="https://js.csvbox.io/script.js"></script>
<button
data-csvbox
data-key="YOUR_LICENSE_KEY"
data-private="true">
Secure import
</button>vs. Other embeddable importers
| Flatfile | OneSchema | Dromo | CSVbox | |
|---|---|---|---|---|
| Rows touch vendor server | Yes | Yes | Yes | No (Private Mode) |
| SOC 2 on free tier | No | No | No | Yes |
| Client-side validation | Limited | Limited | Limited | Full |
| EU residency | Add-on | Add-on | Limited | Included |
Frequently asked questions
What exactly is Private Mode?
The widget parses, maps, and validates in the browser and POSTs clean JSON to your API endpoint. No file, no row, ever lands on CSVbox servers.
Can I still use column mapping AI?
Yes — mapping happens client-side.
What certifications do you have?
SOC 2 Type II and GDPR, included on every plan — even the free tier. US and EU data residency are selectable at setup.
Can we audit this?
Yes — open browser devtools on the demo and watch the network traffic.