What browser-local PDF encryption means

A browser can read a file you deliberately select and run code against it on your device. That does not automatically mean the file has been uploaded. The important question is whether the application transmits the file bytes to a server.

What happens in SecurePDF

You select a PDF through the browser's file picker. SecurePDF's code reads that local file, adds the requested protection and creates a new download in the browser. The PDF bytes, filename and generated password are not posted to the SecurePDF backend.

What still leaves the device

Like any website, SecurePDF receives ordinary web requests. Signed-in users also send account, subscription and non-sensitive usage information to Supabase. Aggregate product events deliberately exclude filenames, passwords, document contents and account identifiers.

How to verify the result

The Trust & Security page describes the data flow and retained metadata. Organisations with formal assurance requirements should review that information against their own policy before use.