Skip to main content

Security & Privacy Architecture

Learn how PDFtiny executes 100% browser-based PDF processing with full GDPR compliance. Your documents never touch remote servers.

Zero-Trust Client-Side Architecture Whitepaper

PDFtiny is architected around a strict zero-trust model: the most secure server is the server that never receives your file in the first place. By compiling standard ISO 32000 PDF parsing and cryptographic libraries into WebAssembly, your documents are sandboxed directly on your CPU.

Security Foundations

  • Memory Isolation: Processing runs in ephemeral WebAssembly linear memory within your browser process sandbox.
  • Cryptographic Standards: Password protection utilizes the browser's native W3C Web Cryptography API executing authenticated AES-256 GCM encryption.
  • Zero Data Transit: Completely eliminates Man-In-The-Middle (MITM) data intercept risks and cloud bucket compromise vectors.