Short answer: Sejda is a legitimate, well-regarded PDF service with a clean security record — encrypted transfers, a 2-hour file deletion window, and GDPR-aligned practices. For routine documents, that’s genuinely fine. What’s more interesting about Sejda specifically is that the company itself seems to agree the cloud model has limits: they built and sell an entire separate desktop app whose only real selling point is that your files never touch their servers at all. That’s worth sitting with for a second — even Sejda’s own product lineup treats "never uploaded" as the safer tier.
Here’s what actually happens to a file on Sejda’s web tool, how its security claims hold up, and where a browser-based tool skips the upload step entirely — with zero install required.
What happens when you upload a file to Sejda Web
The standard cloud-PDF sequence:
- Your file is transmitted to Sejda’s processing servers over an encrypted connection.
- It’s kept available on their servers for editing and download for a fixed window.
- You download the result.
- The file is permanently deleted from their servers afterward.
Sejda’s own documentation is fairly candid here: the retention window for Web is 2 hours, after which files are permanently wiped with no backups kept. If you generate a public sharing link for a file, that link expires and auto-deletes after 7 days. Compared to some competitors that quietly keep files for account-holders indefinitely, this is a tighter, more predictable window.
Sejda’s actual security standing
Credit where due — Sejda’s practices are solid for a mid-sized PDF service:
- Files transferred over standard TLS/SSL encryption
- A documented, short 2-hour retention window for Web processing, with public share links expiring after 7 days
- GDPR-aligned data handling, with privacy policy language addressing EU data protection
- No public record of a data breach — a real point in their favor, since larger competitors in this space (Foxit, for one) have had breaches on record
Where Sejda is noticeably thinner than the bigger players: there’s no ISO/IEC 27001 certification or SOC 2 report publicly listed, and their Data Processing Agreement documentation is less built-out than what Smallpdf or iLovePDF publish. That doesn’t mean anything is wrong — plenty of smaller, well-run companies simply haven’t gone through a formal audit process — but if you’re checking boxes on a compliance list, Sejda has fewer boxes to check than some competitors.
The tell: Sejda built a desktop app specifically for this problem
This is the detail that makes Sejda’s case different from most cloud PDF tools. Sejda Desktop runs the exact same feature set as the web version — but every file is processed locally on your machine, with no server contact at all. Their own marketing for it is direct about why it exists: for files with "special privacy considerations" that customers "are not allowed to upload to a third party service."
That’s a company acknowledging, in its own words, that the cloud version isn’t the right tool for every document. It’s a reasonable answer — but it also means the actual privacy protection requires downloading, installing, and paying for a separate desktop product. The free web tool, the one most people land on first, is still the same upload-based model as everyone else.
Where the upload itself is the problem
Even with a short retention window and a clean track record, a file that leaves your device has left your device. For a few categories of documents, that fact matters more than how quickly the copy gets deleted afterward.
Photos and signatures for government exam forms. UPSC, SSC, RRB, PAN, NEET, TNPSC applications require photos and signatures compressed to exact KB sizes. Since these carry your face and signature, using local resizers like the UPSC Image Resizer, SSC Photo Resizer, or our general Signature Resizer ensures they never leave your device. Compressing them doesn’t need a server, 2-hour window or not.
Aadhaar and other ID documents. An e-Aadhaar PDF’s password protection exists to limit access. Uploading it anywhere to decrypt and compress it — even briefly — adds risk. Using our local Aadhaar PDF Compressor skips the server step entirely.
Contracts, medical records, and financial paperwork. Sejda itself flags that professionals handling data under strict GDPR/HIPAA compliance requirements are better served elsewhere — their free tier doesn’t offer a Business Associate Agreement, so it isn’t a fit for Protected Health Information regardless of how good the encryption is.
The alternative: browser tools that never leave your device, no install required
This is exactly the gap ZapToolHub fills — without needing a separate paid desktop app to get there. Every tool on the site — image compression, resize, PDF compression, and Aadhaar-specific tools — runs entirely inside your browser using WebAssembly. There’s nothing to download, nothing to install, and no server in the loop at all — the "local processing" tier Sejda reserves for a separate paid product is just how ZapToolHub’s free web tools work by default.
You can check this yourself: load any tool, let it finish loading, then switch off your WiFi. It keeps working — because there was never anything to upload in the first place. Try that with Sejda Web and it stops the moment your connection drops.
There’s a fair trade-off to note: a low-memory phone will feel a very large file more than a desktop would, since your device does the processing instead of a server. For the everyday case this site is built around — an SSC photo down to 20KB, a UPSC signature resize, an Aadhaar PDF under a size cap — that’s rarely a real constraint.
When Sejda’s model is genuinely a fine choice
If you’re processing a non-sensitive document and want a fast, capable web editor with a short retention window and a clean security history, Sejda Web is a reasonable pick — its 2-hour window and 7-day link expiry are tighter than a lot of the competition. And if you specifically need advanced desktop-grade editing with guaranteed local processing, their desktop app is a legitimate answer, just one that costs money and requires installation to get.
A simple rule of thumb
If a document has your photo, signature, ID number, or anything you wouldn’t want sitting on any server even for two hours, use a tool that processes it locally by default — not as an upgrade. Save cloud tools for documents where you genuinely wouldn’t mind, or for features that specifically require server-side infrastructure. That removes the need to judge, file by file, whether something is sensitive enough to worry about.
Frequently asked questions
Does Sejda have ISO 27001 or SOC 2 certification? No — unlike some larger competitors, Sejda doesn’t publicly list ISO/IEC 27001 or SOC 2 certification. Their security practices (encryption, short retention) are solid, but the formal audit documentation is thinner than what companies like Smallpdf or iLovePDF publish.
How long does Sejda keep my files? Files processed through Sejda Web are permanently deleted after 2 hours, with no backups retained. Public sharing links expire and delete automatically after 7 days.
Is Sejda safe for medical or legal documents? Sejda itself acknowledges this isn’t the ideal use case for its free web tier — there’s no Business Associate Agreement for HIPAA purposes, and confidentiality obligations around client documents typically require more than a short retention window. Their own recommendation for this kind of file is the desktop app, which avoids uploading entirely.
What’s the difference between Sejda Web and Sejda Desktop? Sejda Web processes your file on their servers and deletes it within 2 hours. Sejda Desktop is a separate, paid application that processes files entirely on your own computer with no server contact — Sejda markets it specifically for documents with stricter privacy needs.
What’s the safest way to compress a photo or signature for a government exam application? Use a free tool where the processing happens directly in your browser, with no install and no upload step — such as our UPSC Resizer, SSC Photo Resizer, or general Signature Resizer — so that the file with your face or signature never leaves your device at all, at no extra cost.