Skip to content
PDFDaily

Security

We treat every file as sensitive and every upload as untrusted.

Last updated October 22, 2026

How files are protected

  • Browser tools never send your files anywhere.
  • Uploads use HTTPS. Server files are stored without their original names, readable only by the processing service, and deleted after 2 hours.
  • Downloads are served from a separate, cookieless domain with expiring signed links.
  • Every file is checked by its content, not its name, and processed in sandboxed engines with strict time and memory limits.
  • Protect PDF uses AES-256 encryption by default.

Report a vulnerability

If you find a security issue, please email security@pdfdaily.com with steps to reproduce. We reply within 3 working days and won't take legal action against good-faith research.