Is it safe to upload a PDF to an online tool?
What happens when you upload a PDF
Most online PDF tools work the same way. Your browser sends the file to the company's servers, a program there merges, compresses or converts it, and you download the result. For a while, the company holds a copy of your document: the contract, the payslip, the passport scan.
The reputable services say plainly how they look after it: encrypted connections, servers in a named jurisdiction, and copies deleted after a set time. Those promises are worth reading, because they are all you have to go on. Once a file is on someone else's server, you cannot check what happens to it.
How long the best-known services say they keep files
In their own words, as published in October 2026:
- Smallpdf says files are removed from its servers an hour after processing, and kept for 14 days when shared or sent for signature, or for as long as you like in its file storage (Smallpdf).
- iLovePDF says uploaded files are deleted automatically within two hours, with an exception for its signing tool, and that a Delete it now button removes them sooner (iLovePDF).
- Adobe says files uploaded to Acrobat's online tools are deleted unless you sign in to save them, and that you can delete a file from its servers after downloading it (Adobe).
None of these is a reason to panic. They are reasons to think about which documents you upload, and where.
When not to upload
Some documents are worth keeping off other people's servers whatever the policy: anything with an identity number, bank or card details, medical or legal information, a client's confidential material, or anything your employer's rules say must stay inside the company. For those, use a tool that processes the file on your own device.
How to tell whether a PDF tool uploads your file
You can check this yourself rather than take anyone's word for it:
- The offline test. Load the tool's page, then turn off Wi-Fi and mobile data. If it still opens, edits and saves your file, the work is happening on your device.
- The network test. In a computer browser, open the developer tools (F12), choose the Network tab, then use the tool. An upload shows as a request about as large as your file.
- The policy. A tool that uploads has to say where files go and how long they stay. A tool that does not upload says that instead.
How OnePDF handles your files
OnePDF's engine runs inside your browser, so opening, editing, converting, merging, compressing, signing, redacting and text recognition all happen on your device. Signed out, your file is not uploaded to any server, and once OnePDF has loaded, it passes the offline test.
Signing in is optional. With a TensorActivity account, the files you open are also saved to your account, encrypted, so they are there on every device you sign in to; you can keep any file on your device only instead. The privacy page says exactly what is kept, where, and for how long.