Security

The safest file is one we never receive, so that is where we start. For the rest, here is what protects your documents.

Processing on your device

Most tools run entirely in your browser. Your document is not uploaded, so there is nothing on our side to intercept, leak or retain. The site is served only over HTTPS, and browsers are told never to connect to it any other way.

The site's security policy, which your browser enforces, only allows a page to send data to our own domain, our private file storage, our sign-in provider and, because free pages show ads, Google's ad domains. That policy is the same on every page. What differs is whether any third-party code runs: for paid subscribers, and on the tools for the most private documents (bank statements, redaction, passwords, signatures, email and vehicle sales), no ad code loads at all, so nothing on the page could use those permissions. On other free pages Google's ad code runs alongside the tools; the tools still work on your device, but we cannot make guarantees about someone else's code.

Password protection

Protect PDF encrypts documents with AES-256 by default, using qpdf, a long-established open-source PDF library, compiled to run in your browser. Your password is never sent anywhere.

Unlock PDF removes a password you already know. It does not guess, crack or bypass passwords, and cannot open a document you do not have the password for.

Server conversions

Our conversion service only accepts work from our own website, which proves itself with a secret key on every request.
It works on each file in its own temporary folder, deleted when the conversion finishes, and runs without administrator privileges.
It is never given a link to fetch. Small files arrive directly; large ones it reads from our own private storage by name, so it cannot be tricked into retrieving anything else.
Large files go through private storage. Each upload permission is valid for 15 minutes, for one file of an expected type and size, stored under a random name that cannot be guessed. The converted result is fetched through a link that works for ten minutes, for that one file.

HTML to PDF

This is the one tool that visits a web address on your behalf. It refuses addresses on private or internal networks, and checks every image, stylesheet and script the page tries to load against the same rules — not just the address you typed.

Reporting a problem

If you believe you have found a security vulnerability, please email hello@filezuma.com with enough detail for us to reproduce it. Please give us a reasonable chance to fix it before telling anyone else. We will not pursue anyone who reports a problem in good faith and does not access other people's data.