How we keep your files safe

Most tools never upload your file

Merge, split, compress, edit, sign, redact, OCR and most other tools run entirely in your browser. Your document stays on your device, and you can even disconnect from the internet after the page loads. Every result screen tells you where your file was processed.

When our server is needed

Converting Word, Excel and PowerPoint files needs a full office suite, so those files are sent to our server. For them:

• The transfer is encrypted (HTTPS/TLS).
• Conversion runs in an isolated container that has no internet access, so a malicious document can't call out.
• We check that files really are the type they claim to be before converting.
• Your original is deleted as soon as it's converted, and the PDF as soon as you download it, always within 1 hour.
• We don't log file names or contents.

Prefer nothing ever leaves your device? Turn on Private Mode in the footer and server tools are switched off.

Share links are end-to-end encrypted

When you share a file by link, your browser encrypts it with AES-256 before it's uploaded. The key is only in the link itself (after the #), which browsers never send to servers, so we store data we cannot read. Links expire after 1 hour, 24 hours or 7 days, stop working after 20 downloads, and you can delete them any time.

Password protection

Protect PDF uses AES-256 encryption, the strongest standard PDF encryption, and your password never leaves your device. Redact removes content for real: redacted pages are rebuilt so hidden text can't be copied or recovered.

Reporting a security issue

Found a vulnerability? Please email [email protected]with the subject “Security report”. We'll acknowledge it promptly and keep you updated while we fix it.