Transport security

pdftomarkdown.dev is served over HTTPS. API requests should be sent only to https://pdftomarkdown.dev.

Server-side processing

PDF conversion is performed server-side. Cloudflare inspects each PDF, restricts URL fetches to public network targets, and stages immutable bytes in private temporary storage before the configured OCR provider reads them. Mistral OCR 4.1 reads the inspected copy for conversion. Do not use the service for documents that require local-only or air-gapped processing.

API keys

Developer API keys are bearer tokens. Store them in server-side environment variables or secret stores, never in public client-side code.

Document handling

The service is designed to process submitted documents and return Markdown, not to publish or index uploaded files. Signed source access expires after 15 minutes; we request deletion after definite completion, with bounded cleanup for interrupted work. Physical deletion can lag these requests. Avoid submitting highly sensitive documents until your data-handling requirements match this server-side processing model.

For signed-in conversions, an immutable private draft remains usable for 30 minutes, including while completing a purchase when Checkout is available. Starting conversion creates a separate temporary OCR copy with a signed URL valid for up to 15 minutes. Expired draft sources are removed by bounded cleanup; physical deletion can lag expiry. Successful account conversion responses, including Markdown, can be replayed for 24 hours without charging again. Access then expires; stored copies are removed by bounded cleanup and storage lifecycle rules, so physical deletion can occur later. Billing receipts and credit movements are retained separately from document content for accounting and payment reconciliation.

Reporting issues

Report security concerns to security@pdftomarkdown.dev. Include enough detail to reproduce the issue, but do not include third-party secrets or sensitive documents.