PDF Workspace

Security

If you wouldn't email it, we won't be careless with it either.

Q: Is PDF Workspace GDPR compliant?

Yes — PDF Workspace supports full GDPR data subject access requests, so EU users can request, export, or delete their data on demand.

Q: Does PDF Workspace train AI models on my files?

No, never. A document you upload is never used as training data for any model, ours or anyone else’s — that is a contractual line, not a policy that can quietly change.

Q: Is my PDF encrypted when I upload it?

Yes. Every byte travels over TLS 1.3 with Perfect Forward Secrecy between your browser and our servers, and each file is processed in its own isolated, disposable environment.

Q: How long do you keep my files?

Anything you do not explicitly save is permanently deleted within 24 hours. Save a file to your account instead, and it lives in an encrypted personal vault until you remove it.

Q: Is PDF Workspace secure enough for confidential documents?

It is built for exactly that — contracts, financial statements, medical records. Isolated processing, encryption in transit, and a hard no on using your files to train anything.

Your documents are often the most sensitive files your organization holds — contracts, IDs, financials. Every design decision on this page starts from that assumption, and PDF data privacy is treated accordingly, not as an afterthought.

Download whitepaper Contact security team

How we protect your data

What actually happens to your file.

Nothing travels in the clear

TLS 1.3 with Perfect Forward Secrecy covers every byte moving between your browser and our servers — no exceptions.

Not training material

A document you upload never becomes training data for any model — that is a contractual line, not a marketing line.

A sandbox that disappears

Your file is processed in its own isolated environment, spun up for that one job and torn down the second it finishes.

A 24-hour clock, no exceptions

Skip saving a file and it is permanently gone from our servers within a day — nothing lingers by default.

Choosing to keep something is opt-in

If you do want a file kept, a registered account gets an encrypted personal vault that nobody else can reach.

Your card number never reaches us

Every charge routes through a PCI-DSS compliant gateway (Razorpay) — raw card details never touch our infrastructure.

Compliance

Where things actually stand.

GDPR

Full DSAR support

CCPA

Compliant

ISO 27001

In progress

Confidentiality

Strict internal access barriers

FAQ

Security questions people actually ask.

Is PDF Workspace GDPR compliant?

Does PDF Workspace train AI models on my files?

Is my PDF encrypted when I upload it?

How long do you keep my files?

Is PDF Workspace secure enough for confidential documents?

Have a security question?

Talk to our security team security@pdfworkspace.in