Security Architecture & Trust
PdfPix was engineered from day one to eliminate the primary vulnerability of online document tools: uploading sensitive files to remote third-party servers. Discover how our client-side sandbox keeps your data strictly on your device.
Zero Server Uploads
For our core 30+ PDF tools, your PDF bytes never cross the internet. File operations happen locally inside your browser process.
WebAssembly Sandboxing
Processing engines run within WebAssembly and Web Worker sandboxes, restricted by modern browser memory safety guarantees.
Ephemeral Memory
Document data resides only in RAM during your session. As soon as you close or reload the browser tab, the memory is purged.
1. The Paradigm Shift: Serverless Browser Execution
Traditional PDF websites (such as legacy conversion portals) operate by having the user upload their contracts, tax returns, medical records, or corporate reports to a remote cloud server. The server processes the file, saves it to disk, generates a download URL, and promises to "delete it within 1 hour."
This architecture presents substantial security risks: server breaches, intercept attacks, unauthorized logging, employee access, and data subpoena.
2. Transport Layer & Edge Hardening
While your documents are processed locally, our web application bundle is distributed globally via Cloudflare Pages with strict enterprise-grade HTTP security headers:
3. Clear Distinction: AI Tools & Local Tools
Transparency is fundamental to our trust model:
- 30+ Core Tools (100% Client-Side): Merge, split, compress, organize, redact, crop, rotate, sign, stamp, and convert operations execute locally with zero network calls.
- Optional AI Tools (Summarize & Translate): When using experimental AI-driven summarization or machine translation, text extracts are transmitted over encrypted HTTPS to serverless workers purely to invoke the language model. No text is used for model training or permanently logged on disk.
4. Responsible Vulnerability Disclosure Program
We welcome collaboration with the global cybersecurity community. If you discover a vulnerability or security defect in any part of our web application or client-side libraries, we invite you to report it responsibly.
Disclosure Guidelines:
- Allow us reasonable time to investigate and remediate the issue prior to public disclosure.
- Do not compromise privacy, destroy data, or interrupt service availability during testing.
- Do not engage in social engineering or physical attacks against systems or personnel.