Security is “never uploaded,” plus your habits
Architecture: Web Worker, no server copy. Habits: unique device, lock the screen, wipe the download from a shared PC, send the signed PDF through a channel you already trust. Do not paste the unsigned original into a random chat “just to check.”
What we do not do
We do not store envelopes. We do not issue certificates. We do not OCR. We do not unlock someone else’s password. Only sign files you are allowed to sign.
Shared computers
Browser memory can still leave the download on disk. Save to a private folder, then delete. Incognito does not replace that.
After you sign
If the packet must be encrypted in transit, Protect PDF Instant on your copy. Do not email the password in the same thread as the file.