Is It Safe to Upload PDFs to Free Online Tools?

You need to merge two PDFs. You search for a tool, click the first result, drop the files in and download the merged copy. It takes half a minute, and most of us never stop to think about where the files went in the meantime.

For a lot of documents that's perfectly reasonable. For some it isn't. This article explains what normally happens to an uploaded file, which documents deserve more care, and two simple checks you can run on any tool, including ours.

What happens when you upload a PDF

Most online PDF tools do the work on their own servers. Your file is sent to the company, processed there, stored for a while, and the result is sent back to your browser. That's not sinister; it's simply how most of these sites are built, and it lets them offer heavy features for free.

What it does mean is that while your file sits on their systems, its safety depends on things you can't see: how long they keep it, who and what can get at their storage, which other companies they use for hosting, and how careful their engineers are.

What the well-known services promise

The big, established sites are fairly open about this. Their policies usually say uploaded files are deleted automatically after a set time, often somewhere between an hour and a day, that transfers are encrypted, and that files aren't used for anything else. Some keep files in your account until you delete them yourself. For everyday documents that's a reasonable deal.

There are still three gaps worth knowing about:

• The file exists somewhere else for a while. "Deleted after two hours" still means two hours on someone else's server. A breach or a misconfigured storage bucket during that time exposes it.
• You can't check the deletion. There's no way for you to confirm a file is gone from their storage, their backups or their logs. You have to take their word for it.
• Most converter sites aren't the big names. Plenty of the smaller ones further down the search results have no clear policy at all, and no obvious owner.

When it matters and when it doesn't

For plenty of files the risk is close to zero. A school event flyer, a published research paper, a manual you downloaded in the first place: if there's nothing private in the document, it doesn't matter much where it goes.

It's different for anything that identifies someone or commits them to something:

• Contracts, especially drafts still being negotiated
• Bank statements, payslips and tax returns
• Passports, driver's licenses and visa paperwork
• Medical records
• Résumés, performance reviews and offer letters
• Anything a client has asked you to keep confidential

If you work in law, accounting, HR or healthcare, your employer's policy or data-protection rules may already decide this for you, and the usual answer is not to send client documents to services the organization hasn't approved.

Look for a clear file-retention policy

Before using any PDF service, check what it says about retaining original files, completed files, passwords, and document contents. A useful policy should be specific, easy to find, and written in plain English.

PilotPDF does not retain those items. When you merge, compress or password-protect a PDF, the completed file is prepared for you to download. Read our file privacy page for the full promise and its limits.

Four questions worth asking

• Does the service keep the original file or the completed result?
• Does it publish a specific retention period?
• Does it require an account or save documents to account storage?
• Does its policy explain analytics and support data separately from file contents?

The short answer

Is it safe to upload PDFs to free online tools? For documents with nothing private in them, a reputable site is fine. For documents you wouldn't want to see in a data breach notice, uploading means trusting a promise you can't independently confirm. Sort your files into those two groups, then choose a service with a direct retention policy for the second group.