Is it safe to upload a PDF to an online editor?

Mostly, for ordinary documents. The well-known services publish real security measures. But "mostly safe" is a weak standard for a form with your Social Security number on it. Here is what five major editors say in their own words, and how to avoid the question entirely.

Updated October 2026 · 6 min read

What happens when you upload

Your file travels to a company's server, gets processed, and is stored for some period before deletion. During that window, you are trusting the company's security, its staff policies and its word. Reputable companies take that seriously. The risk is not that they are careless. It is that a copy exists outside your control at all.

What five services say

We read each company's own pages. Wording is quoted or closely paraphrased. Policies change, so treat this as of October 2026 and check the linked pages yourself.

Not every field is on every page, and "not stated" is not the same as "not done". These are the companies' claims; we have not audited any of them.

A fair reading

These are not sketchy operations. Encrypted connections, short deletion windows and third-party audits are what you would want to see, and most online editors will treat your file responsibly. A one-hour or two-hour window is also much better than indefinite storage.

But every row has the same structure: you send the file, then trust the promise. That is a reasonable bet for a menu or a flyer. It is a worse one for documents that would cause real damage if leaked. A breach, a misconfiguration or a support request that touches your file is unlikely, but not impossible, and you cannot check any of it yourself.

What not to upload

• Government ID numbers: SSN, SIN, passport and driver's licence numbers, tax forms like W-9 or TD1.
• Banking details: account and routing numbers, void cheques, card numbers, statements.
• ID scans: passports, licences, health cards, birth certificates.
• Medical records: insurance forms, intake paperwork, prescriptions.
• Anything confidential that isn't yours: client contracts under NDA, employer documents, tenants' details.

If you must use an upload-based tool for one of these, redact first (see how to redact a PDF properly, since black boxes alone often leave the text underneath).

What to look for in a policy

1. A stated deletion window. "Deleted after one hour" beats "we may retain".
2. What survives deletion. Look for backups, logs, saved or shared files, and signed documents (iLovePDF, for example, keeps signed ones for up to 5 years).
3. Encryption in transit and at rest. Both, not just HTTPS.
4. Independent audits. ISO 27001 or SOC 2 mean someone outside the company checked.
5. Staff access. Does it say when employees can open your files?
6. Account side effects. Signing in to save a file usually means it stays on the server.

How to check a tool really works locally

"Your files never leave your device" is easy to claim. You can test it in a few minutes.

Network tab test

1. Open the tool's page, then press F12 (or Cmd+Option+I on Mac) and choose the Network tab.
2. Click the clear button, then load your PDF and make an edit.
3. Look for large requests, especially POST or PUT, with a size near your file's. Click one and check the payload.

Small requests for analytics or fonts can exist in a local tool. A request as big as your PDF is the sign of an upload.

Airplane-mode test

1. Load the tool's page fully.
2. Turn off Wi-Fi or switch to airplane mode.
3. Open a PDF, edit it and download. If it works, processing is happening on your device.

Other ways to avoid the question

You don't need Penwise for this. Mac Preview, Chrome's and Edge's built-in PDF viewers and the free Acrobat Reader all work on your own computer. We compare them in how to sign a PDF without uploading it. If you are leaving pdfFiller, see pdfFiller alternatives.

Where Penwise fits

Disclosure: we make Penwise.

Penwise is a Chrome extension that fills PDF forms, adds text anywhere, signs (drawn, typed or uploaded) and downloads with no watermark. It runs in the browser, so files are never uploaded, and there is no account. You can run the two checks above on it yourself. Everything above is free. Pro is a $9.99 one-time payment for true redaction, page organizing and merging.

It does not do OCR, compression, conversion to Word, e-signature workflows with other people, audit trails or certificate-based digital signatures. If you need those, an upload-based service may be the right choice, ideally with a document you are comfortable sharing.

FAQ

Are online PDF editors safe?

The major ones publish real protections: encrypted connections, automatic deletion after an hour or two, audits like ISO 27001 or SOC 2. For everyday documents that is reasonable. For SSNs, bank details, IDs or medical records, a tool that never uploads the file is safer.

How do I know if a PDF tool uploads my file?

Use the Network tab or airplane-mode test above. A large outgoing request, or a tool that stops working offline, means your file is going to a server.

Is it safe to upload a PDF with my Social Security number?

It is safer not to. Even with deletion policies, a copy exists on someone else's server for a while. Process it on your own computer instead.

Does deleting after an hour mean my file is safe?

It means the service intends to remove it after that time. The file still left your computer, so you rely on their security and word during that window.