Privacy and data protection
Is it safe to upload PDFs to online converters?
Online PDF converters are convenient, and many are run responsibly. Whether one is safe for a particular document depends on what is in the file, what the provider does with it, and the rules you work under. This article explains what to check.
RedactNinja guide. Updated 5 October 2026.
What happens when you upload a file
Most online converters work on a server. Your browser sends the whole file to the provider, the provider's systems convert it, and you download the result. For a while, a copy of your document exists on equipment you do not control.
How long that copy is kept, where the servers are, who at the provider can reach it, and whether it is used for anything else are all decided by the provider. Those decisions are normally set out in its privacy policy and terms of service, and they differ from one service to the next. A file can also pass through other companies the provider relies on, such as hosting or storage services.
None of this makes an online service unsafe in itself. It means the safety of your document depends on the provider's security and practices as well as your own.
Personal data changes the question
If the PDF contains information about people, such as names, addresses, health details or case notes, data protection law applies. When you upload it for your organisation, the provider usually acts as a processor: someone who processes personal data on behalf of the controller, which is your organisation.
The ICO explains that controllers must only use processors that give sufficient guarantees about their security measures, and that there must be a written contract. That contract has to require, among other things, that the processor acts only on the controller's documented instructions, keeps the data secure, and deletes or returns it at the end. The controller remains responsible for overall compliance.
If the servers are outside the UK, the rules on international transfers may also apply. Clicking through a free service's terms on your own may not meet these requirements, so check your organisation's policy before uploading anyone else's information.
Questions to ask before you upload
The UK National Cyber Security Centre publishes cloud security principles, covering topics such as protecting data in transit, separating customers and controlling staff access, that make a useful checklist for larger decisions.
- Does the privacy policy say how long uploaded files and converted results are kept, and when they are deleted?
- Where are the files processed and stored, and which other companies are involved?
- Can the provider's staff access files, and in what circumstances?
- Are files used for anything other than your conversion, such as improving the service?
- Is the connection encrypted, and are stored files encrypted?
- Is there a contract or data processing agreement your organisation can sign?
- Has your organisation approved this service for the kind of document you have?
When local processing is a better fit
Some tools do the work inside your browser or in an app on your own device, so the document is never sent to a server. That removes the questions about retention, staff access and transfers for the file itself, because no one else receives it.
Local processing suits documents that contain personal or confidential information, files you are not allowed to share with third parties, and situations where you cannot easily get a contract in place. It is also useful when you need to work offline.
An online service can still be the better choice when it offers a conversion that local tools cannot match, when your organisation has already approved it under a proper contract, or when the document is already public.
How to check what a tool does with your file
You do not have to rely on a description. In a desktop browser, open the developer tools, select the Network tab and run the conversion. An upload shows up as a request, usually a POST or PUT, roughly the size of your file or split into several smaller requests. If no such request appears and the tool still works with the network disconnected, the processing is happening on your device.
RedactNinja PDF is built this way: files are processed in the browser on your device and are not uploaded. Our step-by-step guide shows how to check that your PDF is not uploaded, and the security model explains the design.
Local tools have limits too
Keeping a file on your device moves the responsibility to you. Browser extensions can read the pages you visit, shared or unmanaged computers may keep downloaded copies, and your organisation's rules still apply to where files are saved and sent.
Neither approach removes sensitive information from a document. If a file will be shared, remove what the recipient should not see first. See how to redact a PDF properly and how to remove hidden data from a PDF before sending it.