PDF Converter Security

The converter is designed to minimize how long uploaded documents exist and who can retrieve a conversion result.

Upload and job protection

• Files are accepted only through HTTPS and are checked for size, PDF signature, MIME type, and basic PDF structure.
• Every conversion uses a randomized job identifier and a separate 256-bit access token whose hash is stored by the service.
• Temporary files use randomized private storage outside the public web root.
• Conversion status and download responses are marked private and no-store.

Retention

The source PDF is removed after processing. Download access to a completed DOCX ends within 30 minutes. A recurring cleanup process verifies physical deletion, retries failures, and blocks new uploads when its heartbeat is stale. Failed and cancelled jobs follow the same verified-deletion path.

Current capabilities

The current text-only mode creates an editable DOCX from selectable PDF text, retains page breaks, and approximates line layout. Images, tables, columns, and complex formatting may not be preserved. OCR, password-protected PDFs, and batch conversion remain disabled.

Operational scope

Temporary application storage is configured outside the public site directory. Hosting-level snapshots and backup scope are reviewed separately; we do not describe the service as completely anonymous or claim a certification without published evidence.

Report a security concern

Please use the contact page and include steps to reproduce the issue without attaching a sensitive document.