Is It Safe to Upload PDFs to Free Online Tools?

You need to merge two PDFs. You search for a tool, click the first result, drop the files in and download the merged copy. It takes half a minute, and most of us never stop to think about where the files went in the meantime.

For a lot of documents that's perfectly reasonable. For some it isn't. This article explains what normally happens to an uploaded file, which documents deserve more care, and two simple checks you can run on any tool, including ours.

What happens when you upload a PDF

Most online PDF tools do the work on their own servers. Your file is sent to the company, processed there, stored for a while, and the result is sent back to your browser. That's not sinister; it's simply how most of these sites are built, and it lets them offer heavy features for free.

What it does mean is that while your file sits on their systems, its safety depends on things you can't see: how long they keep it, who and what can get at their storage, which other companies they use for hosting, and how careful their engineers are.

What the well-known services promise

The big, established sites are fairly open about this. Their policies usually say uploaded files are deleted automatically after a set time, often somewhere between an hour and a day, that transfers are encrypted, and that files aren't used for anything else. Some keep files in your account until you delete them yourself. For everyday documents that's a reasonable deal.

There are still three gaps worth knowing about:

• The file exists somewhere else for a while. "Deleted after two hours" still means two hours on someone else's server. A breach or a misconfigured storage bucket during that time exposes it.
• You can't check the deletion. There's no way for you to confirm a file is gone from their storage, their backups or their logs. You have to take their word for it.
• Most converter sites aren't the big names. Plenty of the smaller ones further down the search results have no clear policy at all, and no obvious owner.

When it matters and when it doesn't

For plenty of files the risk is close to zero. A school event flyer, a published research paper, a manual you downloaded in the first place: if there's nothing private in the document, it doesn't matter much where it goes.

It's different for anything that identifies someone or commits them to something:

• Contracts, especially drafts still being negotiated
• Bank statements, payslips and tax returns
• Passports, driver's licenses and visa paperwork
• Medical records
• Résumés, performance reviews and offer letters
• Anything a client has asked you to keep confidential

If you work in law, accounting, HR or healthcare, your employer's policy or data-protection rules may already decide this for you, and the usual answer is not to send client documents to services the organization hasn't approved.

Tools that don't upload at all

Uploading used to be the only practical way to edit a PDF on the web. It isn't any more. Browsers can now open, change and save a PDF on your own computer, so the file never needs to leave it.

That's how PilotPDF works. When you merge, compress or password-protect a PDF, the file is processed in your browser and the result is saved straight to your device. There's no copy on our side to keep or delete. The privacy-by-design page explains how it works, including the limits.

One nuance: "no upload" isn't the same as "no internet connection". Some tools download extra pieces the first time you use them. PDF OCR, for example, fetches its text-recognition engine and language data when you start it. That's data coming to your browser, not your document going out, but it matters for the second check below.

Two checks you can run on any tool

You don't have to take any site's word for this, ours included.

1. Watch the network. Press F12 (or right-click and choose Inspect), open the Network tab, then use the tool. A site that uploads will send a request about the size of your file as soon as you add it or press the button. Downloads coming in are normal; what you're looking for is your file going out.
2. Go offline. Open the tool, let the page finish loading, then turn on airplane mode or disconnect from Wi-Fi, and process a file. A tool that uploads can't work without a connection. A local tool still finishes the job. If a tool normally downloads something extra, like OCR language data, run it once while you're online first, or it may fail for that reason instead.

The short answer

Is it safe to upload PDFs to free online tools? For documents with nothing private in them, a reputable site is fine. For documents you wouldn't want to see in a data breach notice, uploading means trusting a promise you can't check, and you no longer have to. Sort your files into those two groups, and for the second group use a tool that passes the two checks above.