Is It Safe to Upload Documents to Online Converters?

Updated 27 October 2026 · by the My Gadgets team

For an ordinary file, usually yes. For a passport scan, payslip, contract or medical letter, uploading it means trusting a company you know nothing about with a copy, and you cannot take that copy back. Most converters do delete files as promised. The problem is that you cannot check, and the documents people most often need to convert are exactly the ones that would hurt most if they leaked. This article explains what really happens after you press "Upload", how to judge a service in two minutes, and how to tell whether a tool processes files on your own device instead.

What happens to a file after you upload it?

When a converter works on a server, your file makes a round trip:

1. It travels to the company's server (encrypted in transit if the address starts with https://).
2. It is stored there, at least while it is processed, often in a cloud storage bucket.
3. It is converted, and the result is stored too, so you can download it.
4. Both copies are deleted after a while: the privacy policy usually says one hour, a day, or "after processing".

Each step is a place where things can go wrong without any bad intent: a storage bucket misconfigured so it is public, backups that keep files longer than the policy says, logs that record file names (which are often personal: passport-ahmad-2026.pdf), staff with access for support, or a sub-processor in another country. Free services also need to make money somehow, and advertising-funded sites run third-party scripts on the very page where you choose your file.

None of this means a given service is careless. It means that, for a sensitive document, "they say they delete it" is the whole of your protection.

How do I judge an online converter?

Spend two minutes before uploading anything personal:

https:// is necessary but tells you only that the file is protected on its way to the server. It says nothing about what happens once it arrives.

How can I tell if a tool works on my device instead?

Some converters, including every tool on this site, do the work inside your browser: the page downloads the program, and the program processes your file on your own phone or computer. Nothing is uploaded, so there is nothing to delete. You don't have to take that on trust; you can test it.

The offline test

1. Open the tool and run it once on a harmless file, so the page and everything it needs are downloaded.
2. Switch off Wi-Fi and mobile data (or turn on airplane mode).
3. Run the tool on your real file.

A tool that works on your device still finishes, because it never needed the network for your file. A server-based converter fails or hangs, because it cannot upload anything.

On this site the test works for the PDF, image, text and file tools. The video and audio tools are the exception: their processing engine is about 32 MB, too big to keep for offline use, so they need a connection to load it even though your file still stays on your device. For those, use the next check.

The network check (on a computer)

1. Open the browser's developer tools: F12, or Cmd + Option + I on a Mac, then the Network tab.
2. Choose your file and run the tool.
3. Look at the requests that appear. Downloading scripts is normal. An upload shows up as a request whose size is roughly the size of your file, usually a POST.

If no request is anywhere near your file's size, the file did not leave your computer.

Which documents should never go to an unknown server?

Treat these as "only on my device, or only to the organisation that asked for them":

• Passports, national ID cards, driving licences and residence permits.
• Payslips, bank statements, tax returns and anything with an account or IBAN number.
• Signed contracts, tenancy agreements and powers of attorney.
• Medical records, test results and insurance claims.
• Anything with a child's details on it.

For everything else, such as a public brochure, a menu or slides from a talk, an online converter is a perfectly reasonable choice.

What if I have already uploaded something sensitive?

You cannot pull a copy back, but you can limit the damage:

• If the service has a "delete" button or a deletion request form, use it now, and keep the confirmation.
• If the document was an ID or bank statement, watch for phishing that uses your details, and tell your bank if account numbers were included.
• For an identity document that you think was exposed in a breach, the issuing authority's website explains what to do. This varies by country, so check the official source.

Safer ways to do the common jobs

Most uploads happen for a handful of tasks, and each one can be done on your device:

• Make a PDF smaller for an upload limit: Compress PDF, or see why a PDF is large in the first place.
• Turn photos of pages into one PDF: Images to PDF.
• Sign a form without printing it: Sign PDF.
• Send only the pages someone needs: Remove Pages from PDF.
• Keep a copy in cloud storage that the provider cannot read: Encrypt File seals it with a password first (AES-256, with the key derived from your password). Only this site's Decrypt File opens it again, so keep the password somewhere safe: it cannot be recovered.

Your computer also has some of this built in. On a Mac, Preview can combine PDFs and export a smaller one (File → Export, then a Quartz Filter such as "Reduce File Size", which can be harsh on scans). On Windows and most phones, Print → Save as PDF turns almost anything into a PDF.

Quick answers

Is a converter safe if it says "files deleted after one hour"? It is probably honest, but you cannot verify it. For sensitive documents, prefer a tool that never receives the file.

Does the padlock in the address bar mean my file is safe? It means the file is encrypted on the way to the server. It does not say what happens on the server.

Are apps safer than websites? Not automatically. A phone app can upload files just like a website, and many converter apps are front ends for the same servers. The offline test works for apps too.

Is it safe to upload documents to a government or bank portal? That is a different situation: they are the organisation that asked for the document, and they are bound by the rules that apply to them. The risk this article is about is the extra copy you give a third party on the way.

What to do next

Before your next upload, try the offline test on the tool you are about to use. If you need to shrink, combine or sign a sensitive document, Compress PDF, Images to PDF and Sign PDF do it on your device. If you are sharing an ID scan or payslip, read how to share one safely first.