How pdfmix protects your files

Encrypted in transit

Every upload, edit, and download travels over TLS. Nothing moves between your browser and our servers in the clear.

Isolated sessions

Each editing session keeps its files in its own isolated storage, addressed by a long, unguessable random ID. One session cannot see or reach another's files.

Short-lived storage

Files are deleted automatically 2 hours after upload. You can also press Delete now to remove everything in your session immediately — no confirmation steps, no waiting.

Clean exports

Your exported PDF is written from scratch rather than patched on top of the original, so it carries no incremental history of earlier versions. We also strip document metadata and active content such as JavaScript and embedded files.

Redaction that actually removes content

A black rectangle drawn over text is not redaction: the text still exists underneath and can be selected, copied, or extracted with basic tools — a mistake that has embarrassed courts and companies alike. pdfmix takes a stricter approach: pages with censored areas are converted to images at export, so the covered content is not hidden but gone. The trade-off is that those pages lose their selectable text.

Built on proven tools

PDF processing runs on qpdf and poppler — battle-tested open-source tools that have been reading and rewriting PDFs in production systems for many years.

Found a problem?

If you believe you have found a security issue in pdfmix, please tell us. Reports reach the team directly, we read every one, and confirmed issues are fixed with priority.