Home › Guides

Is It Safe to Merge PDFs Online? What Happens to Your Files

Updated 25 October 2026

Online PDF tools are convenient, but most of them work by uploading your documents to a server, processing them there, and keeping them for a period before deletion. For a recipe or a train ticket that's fine. For bank statements, ID scans, medical letters or contracts, it's worth knowing what happens to your data.

How most online PDF tools work

  1. Your file is uploaded to the company's servers.
  2. The server merges, compresses or converts it.
  3. You download the result.
  4. The files are deleted after a set time — often between one hour and a day, according to the service's policy.

Reputable services encrypt uploads and delete files as promised. But you're still trusting a third party with a copy of your document, and you usually can't verify what actually happens to it.

The risks of uploading sensitive documents

  • Data retention: files may be kept longer than you expect, including in backups.
  • Breaches: any server that stores files can be attacked.
  • Workplace rules: many employers forbid uploading company documents to unapproved services, and data-protection laws such as the UK GDPR apply when documents contain other people's personal data.
  • Jurisdiction: the server may be in another country with different privacy laws.

The safer approach: tools that run in your browser

Modern browsers can process PDFs locally, without sending them anywhere. PDF-M works this way: the merging code is downloaded to your browser when you open the page, and your files are read and combined on your own device.

How to check a tool doesn't upload your files:

  • Load the page, then turn off Wi-Fi or mobile data and try it. If it still works, your files aren't being uploaded.
  • Look for a clear statement in the privacy policy that files are processed locally.
  • Watch the speed: tools that upload large files show an upload progress bar first.

Checklist for sensitive PDFs

  • Prefer local processing (built-in apps or an in-browser tool).
  • Avoid tools that require an account just to merge files.
  • Remove anything you don't need to share before sending the merged document.
  • Keep your original files until you've checked the result.