The PDF toolkit that never sees your files
AI summaries, PII redaction, digital signatures, table extraction — all running in your browser. Your PDF file is never uploaded. When you use AI, only what you ask about is sent — the text, or the page image when you OCR a scan. Never the file itself.
Built for fiduciaries, attorneys, and clinicians who can’t ever upload client files. See industry solutions →
Privacy Inspector Verify
See every request the app makes, and how many bytes it carried. Check the promise instead of taking it.
AI Summarize & Q&A AI
Ask questions about any PDF. Get answers with page citations.
PII Redaction Privacy
Auto-detect and black out SSNs, addresses, phone numbers.
Digital Signatures Security
Sign PDFs with X.509 certificates. Generate certs in-browser.
Table & Chart Extraction Data
Pull tables to CSV. Extract data points from XY charts.
OCR for Scans Scanned
Read scanned pages on your device and export a searchable PDF. No upload, no quota.
Full Page Toolkit Tools
Merge, split, reorder, rotate, watermark, compress, fill forms, print.
Highlight & Markup Annotate
Highlight, underline, strike through. Save the marks into the PDF — your notes stay encrypted.
Encrypted Storage Local
AES-GCM encryption. Notes unreadable without your password.
Fiduciary-Ready Industry
Trust accountings, asset inventories, beneficiary distributions — analyzed locally, never uploaded.
Three steps, no sign-up
Start to finish in under a minute
Drop your PDF
Drag a file onto the page or click “Launch App.” It loads straight into your browser — there is no upload path in the app, so the file is never sent anywhere.
Use the tools
Summarize, redact PII, sign, extract tables, highlight, annotate. Editing, redaction and signing run entirely in your browser. AI is the one feature that reaches the network — for the text you ask about, or a page image when you OCR a scan.
Export & done
Download your edited PDF, export annotations, or save to your encrypted local collection.
Everything you'd expect from a PDF editor
The privacy is the point, but it isn't the only thing here. Everything below runs on your device, on the free plan, with no account — except the tools marked AI, which send that page or its text off for analysis and count against your daily AI quota. Your PDF file itself is never uploaded either way. It's one editor, too: open “Edit PDF” and all fourteen tools below live behind tabs in the same dialog — not a separate plugin, download or upsell for each one.
Pages
- Merge several PDFs into one
- Split or extract page ranges
- Reorder by drag
- Rotate and delete pages
- Insert blank pages, duplicate pages
Edit
- Edit any region — even on a scan
- Click-to-edit text on native PDFs beta
- Add images, logos and stamps
- Text watermarks
- Fill in PDF forms
Redact
- Black out text permanently
- Auto-detect SSNs, accounts, addresses, phones
- Review each match before applying
- The underlying content is removed, not covered
Sign
- Draw, type or upload a signature
- PKCS#7/CMS digital signatures
- Generate a self-signed X.509 certificate in-browser
- Import your own certificate (.p12)
Scanned documents
- OCR of scanned pages, on your device by default
- Export a searchable PDF with an invisible text layer
- Per-page confidence, re-run any single page
- Automatic detection of which pages need it
- Optional: re-read a page with AI for higher accuracy AI
Read & organize
- Full-text find across the document
- Bookmark/outline navigation
- Highlight, underline, strikethrough
- Sticky notes and freehand drawing
Get data out
- Tables to CSV AI
- Data points from XY charts AI
- Batch image analysis AI
- Export annotations as an encrypted archive
Optimize
- Compress without touching the text layer
- Aggressive shrink by rasterizing
- Handles large documents page-by-page
Not here yet: document comparison, Bates numbering and exhibit stamps. They're on the roadmap — tell us if one of them is what's keeping you on Acrobat.
Architecture, not just a promise
Most “private” PDF tools still upload your files to a server. PrivDF has no upload path at all: the app reads the file locally and every editing operation happens on your device. AI is the single exception — it sends the extracted text you ask about to Venice.ai, never the file. You can check all of this yourself with your browser’s network inspector.
No upload path
Your PDF is read into browser memory. No request in the app carries the file.
Client-side encryption
Annotations encrypted with AES-GCM before hitting IndexedDB.
Check it yourself
Every PDF tool says your files stay private. PrivDF shows you. The Privacy Inspector lists every request the app has made — where it went, and how many bytes it carried. Open a 40 MB contract, edit it, redact it, sign it: the ledger stays empty of your document. Strict Offline Mode then enforces it, and every tool but AI keeps working with the network switched off.
Stays on your device
- The PDF file itself — always
- Filenames and document metadata
- Highlights, notes and annotations
- Your passphrase and encryption keys
- Redaction, signing, page edits, extraction
- OCR text layers
Leaves your device (only when you ask)
- AI: the extracted text for your question or summary → Venice.ai
- Account email, if you create one for Pro → Supabase
- Payment details → Stripe / Apple / Coinbase (we never see them)
- Anonymous page views and button clicks — no cookies, no document data
Venice.ai operates a zero-retention policy for the text PrivDF sends. Your document bytes are never part of any request. Details on the Security page.
Ready when you are
No install, no account, no document data collection. Just open a PDF.
We collect anonymous page views and button clicks so we know which features get used. We never collect document contents, filenames, annotations, passphrases, API keys or AI prompts.
Launch App