Security & Privacy
PDF900 separates browser-local tools from short-lived server processing. We publish exactly where your files go and how long they stay.
Processing model by tool type
| Tool type | Where it runs | File retention |
|---|---|---|
| Merge, split, rotate, watermark, sign, protect | 100% in your browser | Never uploaded |
| Organize, extract, remove pages, unlock, edit | Browser (local) | Never uploaded |
| Compress PDF | Secure cloud servers, or your browser if unavailable | ≤ 1 hour if server |
| Office convert (Word, Excel, PPT, HTML) | Secure cloud conversion servers | ≤ 1 hour |
| Repair PDF / PDF/A | Secure cloud repair servers | ≤ 1 hour |
| AI Summarizer / Translate | Coming soon | — |
| OCR / Request Signatures | Coming later | — |
| Contract Pack workflow | Mostly browser; compress step may use server | ≤ 1 hour if server step used |
Encryption
All connections use HTTPS (TLS). Server uploads use presigned URLs to isolated object storage.
Auto-deletion
Server files and job metadata are deleted within 1 hour. We do not maintain a document archive.
No AI training
We do not use your uploaded documents to train machine learning models.
Rate limiting
Anonymous users: 5 server jobs per IP per day. This protects infrastructure and reduces abuse.
E-signature disclaimer
Signatures added in PDF900 are visual overlays for convenience. They are not a substitute for qualified electronic signatures where law requires them.
- Consult legal counsel for binding contracts.
- For multi-party signing workflows, Request Signatures will arrive in a later phase.