Security & privacy

How your documents and data are handled.

Browser-first processing

Most tools (merge, split, rotate, watermark, sign, redact, and more) run entirely in your browser. Those files are never uploaded to our servers.

Server-side tools

Heavier tools (compress, OCR, Office conversions) process on our server over an encrypted HTTPS connection. Uploaded files are used only for the requested operation and are removed after processing.

eSignature retention

Signature documents and audit trails are retained to complete the signing workflow and are automatically purged 90 days after creation.

Encryption

All traffic is served over TLS/HTTPS. Passwords are stored using industry-standard bcrypt hashing; we never store them in plain text.

Your data rights (GDPR)

You can delete your account and all associated data at any time from your account page. Deletion is immediate and irreversible.

Compliance roadmap

We are working toward formal ISO 27001 certification. For white-label or on-premise deployments where documents never leave your infrastructure, contact us.