Document data privacy for PDF Embed API

Hi there. I'm experimenting with the PDF Embed API for a document portal that we maintain for clients. Many of the PDFs have sensitive information that we need to understand whether the data is being sent to remote servers even temporarily for rendering purposes.

Is there a document that outlines whether and how the PDF embed API does or doesn't send data to remote servers during the rendering process? I see a bunch of blob: entries in the browser network log, but I understand those to be local accesses. I saw in the press release what seems to indicate that rendering is all done client-side, but wanted to see if there was any more detail documented somewhere.

Thanks!