Security
Architecture
One open, typed engine runs on your device for most tools (browser Web Worker, mobile, desktop). Server jobs run in isolated workers with no network access to other customers’ data.
Encryption
TLS 1.2+ in transit; AES-256-GCM at rest with per-file keys; password-protected PDFs use AES-256.
Retention
Uploaded files and results are deleted after one hour (or immediately after download). A deletion job runs every minute and is monitored.
Malware
Uploads are scanned (ClamAV) before processing; active PDF content (JavaScript, launch actions) is never executed.
Abuse protection
Rate limits per IP and account, proof-of-work for anonymous server jobs.
Responsible disclosure
Report vulnerabilities to security@leaflypdf.com. We respond within 72 hours.