Handling Sensitive Documents Online: A Privacy Checklist
Online document tools are convenient precisely because they do the work on a server instead of your computer. That also means your file leaves your device. For a restaurant menu that hardly matters; for a passport scan, a medical report or a signed contract it matters a great deal. This checklist helps you decide what to upload, where, and how to reduce the risk.
Before you upload: check the service
- Is the connection encrypted? The address bar should show https:// and a padlock on every page, including the upload page.
- How long are files kept? Look for a specific retention period, such as automatic deletion after one hour, rather than vague wording.
- Who operates the service, and where? A real company name, address and contact details are a basic sign of accountability.
- Is there a readable privacy policy that says whether your documents are shared with third parties or used to train AI models?
- Does the service ask for more than it needs? A PDF-to-text converter should not need access to your email or contacts.
Reduce what you share
The safest data is data you never upload. A few habits reduce exposure considerably:
- Only upload the pages you need. Split a 40-page bundle and process the two relevant pages.
- Redact identity numbers, account numbers and signatures you do not need the tool to see — and use true redaction that removes the text, not a black box drawn on top of it.
- Rename files so the file name does not itself reveal sensitive information.
- Download your result and remove your local copies from shared folders such as Downloads when you are finished.
Special categories of information
Health records, government identity documents, financial statements and children's records are protected by specific laws in many countries — for example HIPAA for health information in the United States, the GDPR in the European Union, and the Digital Personal Data Protection Act, 2023 in India. If you handle such documents for work, check your organisation's policy before using any external tool, and prefer services your organisation has approved.
Sending documents securely
Email attachments are copied to every server they pass through and sit in inboxes indefinitely. For sensitive paperwork, consider a channel with a narrower path: a secure upload link from the recipient, a password-protected PDF with the password shared by phone, or a fax to a known number, which delivers directly to the receiving machine and produces a transmission record.
How Free PDF FAX handles your files
Files are uploaded over encrypted HTTPS connections, processed, and deleted automatically within one hour. We do not sell your documents or use them to train third-party models. Full details, including how to contact us about your data, are in our Privacy Policy.
Put this guide into practice
Free PDF FAX includes a free tool for exactly this job.
Written by the Free PDF FAX team at Zoa Zone Services. This guide is general information and not legal advice.