Security & Privacy
PDFHope security design, threat boundaries, and responsible reporting.
Local-first architecture
The production design serves the application through Cloudflare Workers Static Assets. Existing PDF tools continue to run locally; only Word to PDF and PDF to Word use a server conversion endpoint.
Conversion uploads are limited to 20 MB, checked by extension, MIME type, and file signature, rate limited, and streamed to ConvertAPI with a server-only secret. Results use no-store response headers and zero-storage provider mode.
Scope and limitations
Client-side processing reduces server exposure but does not secure a compromised browser, extension, device, or third-party provider. Complex document parsers can contain defects, so dependencies and provider controls require regular review.
Report a concern
Send responsible reports to livenewsuson@gmail.com with steps to reproduce and impact. Do not include live personal data or confidential documents.