ABC and XYZ analysis that never takes your file

The file you need for ABC or XYZ analysis is not "just a spreadsheet". It holds your whole range, volumes, prices, sometimes the names of customers or suppliers. From an export like that anyone can see what you earn on, where you are losing, what your margin is and how dependent you are on a single supplier. It is exactly the set of numbers you do not show to outsiders.

So for anyone about to run their range through an online service, the first question is not "how does it work" but "where does my file go". And it is the right question: in a pharmacy, a medical centre or an accounting office, you are the one who will answer for it later.

The usual answer is long: where the servers are, how the connection is encrypted, after how many days everything is deleted, which contract we sign. Here the answer is shorter: the file goes nowhere — it stays in your browser and is calculated there. What follows is why that is possible at all, and how to confirm it yourself without taking anything on trust.

Online tools everyone is used to work in one way: you pick a file, the browser sends it to a server, a program on that server reads it and does the maths, and back comes a finished page with the result. At that moment your export is sitting on someone else's computer. From there on everything depends on someone else's discipline: how long it is kept, which employees can reach it, what ends up in backups, what stays in the logs.

A desktop program works the other way round: it is installed on your machine, it calculates on your machine, and the file does not move. That is precisely why it is easier to get approved — there is nothing there to leak. The price is well known: installation on every workstation, updates, licences, "but I'm on a Mac", "but the bookkeeper has an old laptop".

There is a third option, and it is not new: the program travels to the data, not the data to the program. The browser downloads the calculation module — the same way it downloads the page's images and fonts — and then does the maths on your machine. From the outside it looks like an ordinary website. On the inside it is closer to a desktop program you never have to install.

For many years now, browsers have been able to run not only page scripts but real compiled programs. The technology is called WebAssembly; it is what photo editors and mapping services in the browser are built on, where sending every action to a server would be absurd.

Our calculation engine is written in Rust and compiled into such a module. When you open an analysis page, the browser downloads it once, together with the page itself. After that only your device is working:

• you pick the XLSX file, and your browser reads it;
• parsing the table, checking the columns, every calculation, the class matrix and the recommendations all happen on your computer;
• the report is drawn there too, and the XLSX export is assembled in the browser as well.

There is a side effect that is easy to notice: the speed depends on your machine, not on how busy we are. Tens of thousands of rows are processed in seconds — and there is simply nowhere to process them except at your end.

Which brings us to the main point. What never reaches our servers is the file, any row of it, the column names or the results — classes, coefficients, summary figures, the matrix — nor the recommendations, nor the exported report. The only things that cross the boundary of your device are the things without which a website cannot work at all: signing in, payment, and a message from the contact form if you send one. That is what the diagram shows; the full list, down to every address the application calls, is on a separate page, How the data flow works.

And there is a consequence that takes some getting used to as an advantage: we do not know what you analysed, and we do not even know whether you ran an analysis at all. There is no "number of calculations" metric on our side and there cannot be one — it could not be collected without receiving your data.

This is the simplest way to be sure, and it needs neither special knowledge nor any trust in what we say. A program that needs a server does not work without a network — so if the analysis runs without a network, it does not need a server.

1. Sign in to your account as usual.
2. Open the page of the analysis you need and let it load completely. This matters: the calculation module arrives together with the page, so the network has to go off after the page has opened, not before.
3. Switch the internet off — unplug the cable, turn off Wi-Fi or enable flight mode.
4. Pick your XLSX file, mark the columns, press "Generate Report".
5. Press "Save to xlsx".

The report will be built. The export file will download. If sending the data were required for the calculation, neither of those would happen.

That is exactly how both pictures below were made: a demonstration export of 120 items with monthly sales over a year, XYZ+ABC analysis, the internet switched off as soon as the page had opened.

The matrix is the result of two cuts at once. The ABC letter is about contribution: how much the item delivered over the whole period. The XYZ letter is about stability: how evenly it sold from month to month. An AX item delivers a lot and sells steadily, a CZ item delivers little and in bursts, and the decisions for them are opposite. How classes A, B and C are calculated is worked through in What ABC analysis is — in plain language.

The recommendations panel was assembled without a network too — it is built from your own data, and just like everything else it goes nowhere.

One thing is worth knowing in advance so it does not surprise you. While the network is off, the site is offline as a whole: you cannot move to another page or reload the current one — pages arrive over the network. The calculation carries on regardless. When you are done, switch the internet back on; the report on your screen will not change because of it.

If you would rather not disconnect anything, there is a stricter way — watch what the browser sends while the analysis is running. The tool for that is built into every browser, and you do not have to be a programmer to use it.

1. On the analysis page press F12 (in Safari, enable the developer menu in the settings first).
2. Open the Network tab and clear the list.
3. Run the analysis as usual.
4. Look at the rows that appear between picking the file and the report showing up.

What you will see: calls from the visit counter (Google Analytics — it is on every page of the site, this one included, and counts page views) — and nothing that has anything to do with your file. Neither to our domain nor to any other. A useful detail: requests that send something have a non-zero size of sent data, so you can sort the list by that column and confirm there was nothing to send.

And this is not a matter of settings. There is no address in the application that accepts a file or analysis results — no such handler exists in the code, so there is no checkbox that could turn one on.

Honestly about what follows from the same architecture, and what it costs.

We cannot restore your analysis. Closing the tab takes it with you: there was no copy anywhere except your browser. So export the report to XLSX if you are going to need it again.

We cannot see what went wrong for you. If a file will not parse or a result looks odd, support does not have your export to look at — you will have to describe it in words or put together an example with anonymised data.

Your computer does the work. On very large files the speed depends on your machine rather than on our server. The flip side is that on an ordinary laptop tens of thousands of rows go through in seconds, and there is no queue for a server.

The analysis page is still a web page. It arrives over the network, it carries the visit counter, and we update it the way any site is updated. That is why we keep a separate page describing the data flow and update it in the same release that changes anything described there: every new call to a server, every new third-party script. An out-of-date description there is not a marketing inaccuracy — it is a false statement made to whoever is checking us.

The most convincing check is the one you ran yourself. It takes five minutes and needs nothing but your ordinary file: open the analysis page, wait for it to load, turn off Wi-Fi and do the maths.

If you then want to dig into the methods themselves, there are separate write-ups: what ABC analysis is and complex ABC on two measures at once.