How to choose a private document converter

Start with where processing happens

A browser-based tool can often merge, split or reorder PDFs without uploading the file at all. That is the simplest privacy model because the service never receives the document.

Some formats, especially DOCX to PDF, need a full office rendering engine. In that case, look for a clear deletion window and an isolated worker with no outbound network access.

Ask specific retention questions

‘We value privacy’ is not a retention policy. A useful policy says when the original is deleted, how long the result remains downloadable and what the absolute cleanup deadline is.

• Is the original removed as soon as conversion completes?
• Does the download expire automatically?
• Are filenames or IP addresses kept in analytics logs?
• Can support staff retrieve uploaded files?

Understand encryption

HTTPS protects files in transit. It does not prevent the conversion server from reading a document while doing its job. Isolation, access controls and rapid deletion matter after the upload reaches the server.

Use extra care with sensitive documents

For medical, legal, identity, payroll or confidential business records, prefer an approved local application or an organisation-managed service. No public converter can decide whether a document is safe for you to upload.