Is it safe to upload documents to online converters?
Online PDF and OCR tools are convenient, but most of them work by uploading your file to their server, processing it there, and letting you download the result. For a menu or a public brochure that's fine. For a contract, a bank statement, a medical report or a client's file, it's worth thinking twice.
What happens when you upload a file
With a typical server-based converter:
- Your file is sent over the internet to the company's servers, which may be in another country.
- It's stored there while it's processed, and often for some time afterwards.
- Their staff, contractors or cloud providers could in principle have access to it, subject to their policies.
- If the service is ever breached, stored files can be exposed.
Reputable services encrypt uploads and delete files after a few hours, and many are trustworthy. But you're relying on their policies and their security.
Questions to ask before uploading something sensitive
- Where is the file processed and stored? Is that compatible with your obligations to clients or your employer?
- How long is it kept? Look for a specific deletion period, not "when no longer needed".
- Is it used for anything else? Some free services reserve the right to use uploaded content to improve their products.
- Does your organisation allow it? Many companies, law firms and government offices have rules about third-party tools.
Browser-based conversion: the file never leaves your computer
Docuflat works differently. The conversion and OCR software is downloaded into your browser, and your document is processed on your own computer. The file is never sent to our servers.
Our server only receives a count of how many files and OCR pages you convert, so that daily limits can be applied. It never sees the contents.
You can confirm this yourself: open your browser's developer tools, switch to the Network tab, and convert a file. You'll see the converter's own scripts and language data being loaded, but your document is never sent anywhere.
What about the AI assistant?
Converting privately only covers the conversion step. When you paste the text into ChatGPT, Claude or another assistant, it's sent to that company under their terms. Before sharing confidential material:
- Check your plan's data and training settings. Business and enterprise plans often have stricter terms.
- Remove or replace personal details you don't need, such as ID numbers, account numbers, phone numbers and addresses.
- Send only the section you need, not the whole document. See how to use fewer tokens with documents.