Security & Privacy

The PDF checker stages an uploaded file in temporary server storage while veraPDF validates it. The source file is deleted when processing finishes; an orphan-file sweep removes an inactive temporary file after 15 minutes. The validation result, job identifier, and a one-way hash used for rate limiting remain available for up to 24 hours.

Authenticated scan histories, reports, and generated statements are restricted to members of your organization. Anonymous public-scan results can be viewed by anyone who has their unguessable result link for up to 30 days; anonymous PDF-check results remain link-accessible for up to 24 hours.

We respect your intellectual property. Your websites, documents, and compliance data are never used to train our AI models or third-party AI systems. Your data remains yours.

External traffic to our web application and API is protected with TLS. Payment card details and billing-address information are entered on Stripe-hosted pages and do not pass through our application servers.