Security

Architecture

One open, typed engine runs on your device for most tools (browser Web Worker, mobile, desktop). Server jobs run in isolated workers with no network access to other customers’ data.

Encryption

TLS 1.2+ in transit; AES-256-GCM at rest with per-file keys; password-protected PDFs use AES-256.

Retention

Uploaded files and results are deleted after one hour (or immediately after download). A deletion job runs every minute and is monitored.

Malware

Uploads are scanned (ClamAV) before processing; active PDF content (JavaScript, launch actions) is never executed.

Abuse protection

Rate limits per IP and account, proof-of-work for anonymous server jobs.

Responsible disclosure

Report vulnerabilities to security@leaflypdf.com. We respond within 72 hours.