Many files, one zip, one record.

Every batch zip carries filesanity-record.txt: the date, the policy, and for each file what was removed and what was kept, field by field, with SHA-256 fingerprints of the file before and after. Each clean copy is read again before the zip is made, and the record says what that check found. File it with the matter, the listing or the job. Download report saves the record on its own before cleaning.

Files whose names give something away, a camera date, an email address, "draft", are saved under plain names such as photo-01.jpg; the record pairs each new name with the old one. Untick the box under the window to keep the names.

A batch is read and cleaned in this tab, like a single file. The account is only asked what your plan is and what your policy keeps; the files themselves are never sent. The counter at the top of the window shows it.