Security & Data Protection

At PDFLab, we understand that you trust us with sensitive documents. That's why we've built our platform with security and privacy as the foundation, not an afterthought.

2.1 Encryption in Transit

Every file you upload is encrypted using TLS 1.3 (Transport Layer Security), the latest and most secure protocol for data transmission:

• HTTPS-Only: All connections use HTTPS with automatic HTTP redirect
• TLS 1.3: The latest encryption protocol (faster and more secure than TLS 1.2)
• Perfect Forward Secrecy: Each session has unique encryption keys
• Certificate Pinning: Prevents man-in-the-middle attacks

2.2 Encryption at Rest

Files stored temporarily during processing are encrypted:

• AES-256 Encryption: Military-grade encryption for stored files
• Encrypted File System: Server storage uses full-disk encryption
• Secure Deletion: Files are securely overwritten (not just marked as deleted)

2.3 Automatic File Deletion

Your files are not stored permanently:

2.4 Processing via CloudConvert

We use CloudConvert API for PDF processing, a trusted service with:

• ISO 27001 Certified: International security management standard
• SOC 2 Type II Compliant: Annual third-party security audits
• GDPR Compliant: European data protection standards
• Automatic Deletion: CloudConvert also deletes files after processing

3.1 Hosting & Servers

Our infrastructure is hosted on hardened VPS servers with multiple layers of protection:

• Hostinger VPS: Enterprise-grade hosting with 99.9% uptime SLA
• Fail2ban: Automatic IP blocking after failed login attempts
• UFW Firewall: Only essential ports open (443 HTTPS, 22 SSH)
• Automatic Security Updates: Daily security patches applied automatically
• SSH Key Authentication: Password authentication disabled
• DDoS Protection: CloudFlare protection against distributed attacks

3.2 Database Security

User data is stored in encrypted databases:

• MySQL 8.0: Latest stable version with security patches
• Password Hashing: bcrypt with salt rounds (not reversible)
• Parameterized Queries: Protection against SQL injection attacks
• Network Isolation: Database accessible only from application server
• Regular Backups: Encrypted backups stored separately

3.3 Access Controls

Strict controls on who can access what:

• Zero File Access: No employees can access your uploaded files
• Minimal Data Access: Only authorized personnel can access user metadata (email, name)
• Audit Logs: All database access is logged and monitored
• Two-Factor Authentication: Required for all admin accounts

Compliance & Standards

We comply with international security and privacy standards:

Third-Party Service Security

We carefully vet all third-party services we use:

Why PDFLab is More Secure Than Competitors

Incident Response & Support

If a Security Breach Occurs

While we take every precaution to prevent security incidents, we have a clear protocol:

1. Within 24 hours: Internal incident team investigates
2. Within 72 hours: Affected users notified via email (GDPR requirement)
3. Within 1 week: Public disclosure and remediation plan
4. Full transparency: Detailed post-mortem report published

Report a Security Issue

If you discover a security vulnerability, please report it responsibly:

Security Best Practices for Users

While we secure our platform, you can enhance your security:

• Strong Passwords: Use unique passwords with 12+ characters, mix of letters/numbers/symbols
• Enable 2FA: Two-factor authentication adds an extra layer (coming soon)
• Don't Share Accounts: Each user should have their own account
• Log Out: Always log out on shared computers
• Check HTTPS: Ensure the URL shows https://pdflab.pro (with lock icon)
• Beware of Phishing: We'll never ask for your password via email
• Download Promptly: Download converted files quickly (they're deleted in 24 hours)