Security

How Workify keeps your documents safe.

Uploaded and processed files are deleted from the server one hour after processing. The download page also lets you delete them immediately.

Protect PDF uses 256-bit AES encryption. Passwords are used only for that task and are never stored.

Passwords are hashed with scrypt and a unique salt. Sessions use secure, http-only cookies and are revoked when you change or reset your password.

Accounts confirm their email address, and password reset links are single-use and expire after one hour.

Redact PDF removes the text, image pixels and graphics underneath each redaction, not just a black box on top.

HTML to PDF refuses addresses on private networks, so the tool cannot be used to reach internal systems.

Every signer gets a personal link with a random 128-bit token. Links expire after 30 days.

Completed documents carry a digital signature and an audit trail, so any later change to the file is detectable.