Is Smallpdf Safe? What Happens to Your Files

Smallpdf is a polished, popular PDF service, and "is Smallpdf safe?" is a reasonable thing to ask before uploading a contract, a payslip or an ID scan. The short answer: for everyday documents, yes — it's an established Swiss company with a detailed privacy notice. For confidential files, a tool that never uploads them is the safer choice. Here's what Smallpdf itself says.

What Smallpdf says happens to your files

Everything below comes from Smallpdf's privacy notice, as of October 2026:

• Who runs it: Smallpdf AG, a company incorporated in Switzerland, based in Zürich.
• How long files are kept: if you're signed in, Smallpdf deletes your files within one hour unless you save them to your Smallpdf storage. If you don't have an account or aren't logged in, it says it will "generally aim to delete User Files within a reasonable period of time after the last time they were opened" — and that period restarts each time the file is reopened.
• Where they're processed: uploaded files are processed with Hetzner, on servers in the European Union, with no permanent storage there.
• Security: all file transfers are encrypted with TLS.
• AI: for its AI features (chat, summarise, translate), Smallpdf says it does not use your files to train models.

That's a transparent, detailed notice. The one gap worth noticing is the retention period for users without an account, which has no fixed number.

Is Smallpdf safe for sensitive documents?

For sensitive documents — bank statements, payslips, ID scans — Smallpdf's practices are reasonable, but uploading still carries risks that no policy can remove:

• A copy sits on someone else's server while it's processed and until it's deleted. A breach or a legal request in that window would expose it.
• The deletion window isn't fixed for everyone. If you're not signed in, "a reasonable period of time" is all the notice commits to.
• You can't verify deletion yourself. You're relying on the policy.

Whether that's acceptable depends on the document: a utility bill, probably yes; a full set of identity documents, think twice.

Is Smallpdf safe for confidential documents?

For confidential documents — anything under an NDA, privileged legal material, patient records, client data — the question becomes "am I allowed to give this file to a third party at all?" Employer IT policies, NDAs and professional rules often forbid uploading confidential material to unapproved services, however reputable. US healthcare data generally can't go to a service that hasn't signed a business associate agreement. If you're not sure you're allowed to upload a file, don't.

Smallpdf privacy: the points people raise

• Sign-in changes the deletion rule. Signed-in users get the one-hour commitment; everyone else gets an open-ended one.
• Saved files stay until you delete them. After you delete them, Smallpdf says it generally removes them within 14 days.
• Third parties are involved. The notice lists the service providers it uses, including Hetzner for processing files — normal for a cloud service, but it means more than one company handles your data.

Doing the same job without uploading

Handybin processes files inside your browser tab, so nothing is uploaded at all. Compress PDF, Merge PDF, Split PDF and Redact PDF all work this way, free and with no account. Don't take our word for it — the next section shows how to check.

How to check any PDF tool yourself

Open your browser's developer tools (F12, or right-click → Inspect), switch to the Network tab, then select your file in the tool. A tool that uploads sends a large request to a server as you do it; a tool that processes locally sends nothing. More in Are Online PDF Tools Safe to Use?

FAQ

How long does Smallpdf keep my files? Signed in: deleted within one hour unless you save them. Not signed in: Smallpdf says it aims to delete them within "a reasonable period of time" after they were last opened.

Is Smallpdf legit? Yes. It's run by Smallpdf AG in Zürich, Switzerland, and publishes a detailed privacy notice.

Does Smallpdf use my files to train AI? Its privacy notice says files used with its AI features are not used to train models.

Is Smallpdf safer than iLovePDF? Both are established European companies with published policies; they differ in details like deletion windows. See Is iLovePDF Safe? to compare. For confidential files, the bigger difference is between any upload-based tool and one that keeps the file on your device.