Security & Data Protection
Learn how PDFEditFlow handles file processing, account protection and privacy—and what to consider before uploading confidential documents.
HTTPS connections
PDFEditFlow can be accessed over HTTPS, which encrypts traffic in transit. This is not the same as end-to-end encryption of documents.
Where your files are processed
Some PDF tools run in the browser. Other tools, including optional server converters and AI features, may send content to a server or service. Do not assume all files stay on your device.
Admin account protection
The backend implements authenticated admin sessions, CSRF verification on privileged actions and basic login rate limiting. These safeguards still require secure passwords and server updates.
Image upload validation
Admin image uploads are checked for size, file MIME type and dimensions. This does not guarantee the safety of every document uploaded through other workflows.
Temporary conversion files
The optional server conversion endpoint creates a private temporary directory and registers cleanup after the request. A universal deletion timeline across every feature has not been verified.
Signature and compliance limits
The Sign PDF feature is not a claim of qualified eIDAS signatures. PDFEditFlow does not claim ISO 27001 certification or independently verified regulatory compliance.
Questions? Visit our Contact page.