Is it safe to upload a PDF to an online tool?
· 5 minute read
Most online PDF tools upload your file to a server. Some do not need to at all. How to tell which is which, and when it actually matters.
People paste contracts, medical letters, payslips and passports into free online PDF tools every day, mostly without thinking about where the file goes. Usually nothing bad happens. It is still worth knowing what you are agreeing to, because the answer is not the same for every tool — and for a lot of them, the upload was never necessary in the first place.
The thing most people do not realise
Browsers have become genuinely capable. Merging two PDFs, splitting one, rotating pages, compressing images, adding page numbers, stamping a watermark, even reading a scan with OCR — all of that can run as code inside the browser tab, on your own machine, with the file never leaving your computer.
Many sites upload anyway. Not out of malice: server-side processing is simply easier to build, easier to meter, and the same code has worked since 2010. But it means a file that never needed to travel is sitting on somebody else’s disk.
How to tell what a site is doing
You do not have to take anyone’s word for it. Two checks, neither of which needs any technical knowledge:
- Turn off your internet after the page has loaded, then use the tool. If it still works, the file is being processed locally. If it hangs or errors, it was being uploaded.
- Watch the progress. A large file that processes instantly was almost certainly handled locally; one that shows an upload bar proportional to its size was not.
For the more technical: open your browser’s developer tools, go to the Network tab, and use the tool. An upload shows as a POST request the size of your document. Nothing in the list means nothing left.
When uploading is genuinely unavoidable
Some conversions really do need a server, and it is worth knowing which, so you can tell a necessary upload from a lazy one.
- Word, PowerPoint or Excel to PDF. Laying out an office document faithfully means running an office suite. No browser contains one.
- PDF back to Word, done properly. Reconstructing paragraphs and tables from a page of positioned glyphs is heavy analysis.
- PDF/A, the archival format. It requires colour management and font embedding guarantees that a browser cannot make.
Everything else — merge, split, compress, rotate, watermark, page numbers, images in and out, passwords, redaction — can run locally. If a site uploads for those, that is a choice, not a necessity.
Questions worth asking about any tool
- Does it say plainly whether the file is uploaded, before you choose one?
- If it uploads, does it say how long the file is kept? "Deleted after processing" and silence are very different answers.
- Does it ask for an account to do something that obviously does not need one?
- Is there a privacy policy that mentions documents specifically, rather than only cookies?
The one that deserves real caution
Removing a password from a PDF is different from the rest, and worth pausing over. You are handing over both a confidential document and the key to it, and the tool has to fully decrypt the file to do the job. If the document matters, do that one locally or not at all.
The same goes for redaction. Properly removing text from a PDF means deleting the underlying content, not drawing a black rectangle over it — a black box that leaves the text underneath can be undone by anyone who selects and copies it. This has embarrassed law firms and governments repeatedly. If you redact online, check the result by trying to select the text you removed.