Are Online PDF Tools Safe? What Happens to Your Files

How to tell whether an online PDF site uploads your documents, and what to check before using one for sensitive files.

Many online PDF services work by uploading your document to their servers, processing it there and sending a result back. That is fine for a menu or a flyer, but not for a passport scan, a contract or a medical report.

Two kinds of tool

  • Server-based: your file travels to the company's servers. Privacy depends on their policy, security and deletion practices.
  • Browser-based: the processing code runs on your device and the file never leaves it. Privacy no longer depends on trusting a stranger's server.

How to check

Open your browser's developer tools, go to the Network tab and run a tool. If you see your file being sent in a request, it is being uploaded. With a genuinely local tool, no upload appears. PDFPlume tools such as Merge PDF work this way.

Other things to look for

  • A clear privacy policy that says what happens to files and for how long.
  • HTTPS everywhere.
  • No account requirement for basic tasks.
  • No pressure to install software.

Reducing risk further

For very sensitive files, work offline in desktop software, or use a local tool and disconnect from the internet after the page loads. If you must share the result, protect it with a password using Protect PDF.

Limits of local processing

Running on your device means your device does the work. Very large files can be slow, and the page must stay open until the result is ready.

Tools mentioned in this guide

Merge PDFCombine several PDFs into one file.Protect PDFAdd a password to a PDF.

More guides