“Online” can mean two very different things for a PDF tool, and the difference decides where your document goes.
Two ways online PDF tools work
Server-based tools upload your document to the company’s servers, process it there, and let you download the result. Most well-known online PDF services work this way, and reputable ones encrypt transfers and delete files after a set time.
Browser-based tools download the processing code to your browser instead. Your file is read and changed on your own device, and the result is saved straight to your downloads. The document is never transmitted.
The real risks of uploading
Even with good intentions and strong security, an uploaded file:
- Exists on someone else’s infrastructure, even briefly, and in backups or logs you cannot see.
- Falls under another organization’s policies and jurisdiction, which may conflict with your employer’s rules or regulations such as GDPR or HIPAA.
- Depends on the provider’s security, including their subcontractors and hosting companies.
For a recipe card, none of this matters. For a contract, a medical record, a passport scan, or payroll data, it can.
How to check what a tool does
You do not have to take anyone’s word for it, including ours.
- Watch the network. Open developer tools (F12 or ⌘⌥I), select the Network tab, then process a file. An upload appears as a request roughly the size of your document. Sort by size to spot it quickly.
- Read the privacy policy. Look for retention periods, processing locations, and subprocessors.
A practical rule
Use whatever tool you like for public documents. For anything you would not post on a noticeboard, prefer a tool that processes files locally, or a desktop app you trust.
Every tool on Online PDF Editor, including Edit PDF, Compress PDF, and Merge PDF, processes files in your browser. Read how browser-based PDF tools work for the technical details.