Is PDF Candy safe?
What actually happens to your files — and how to decide when it fits.
🛡️ A neutral look — facts about the service, not a takedown
PDF Candy, by Icecream Apps, runs on ISO 27001-certified servers in the EU and US, with 256-bit AES, GDPR compliance, and two-hour file deletion. The thing to weigh isn't the company — it's the model: its web tools upload your file, while its desktop app processes locally. For sensitive documents, where the file is processed matters more than who runs the service.
What happens to your files
PDF Candy offers two paths. Its web tools upload your file to ISO 27001-certified servers in the EU and US, process it with 256-bit AES in transit, and delete it within two hours. Its desktop app processes files locally on your machine.
The free web tier has time-based limits, after which an account is needed. The practical question is which path you use: the web route involves a round-trip to a server; the desktop route keeps the file on your device.
So is it actually safe?
For everyday PDFs, PDF Candy has strong handling on the web side — ISO 27001 certification, AES encryption, GDPR, two-hour deletion. It earns that credit, and then some.
For confidential material, the consideration is structural, not a knock on the service: anything processed through the web tools leaves your device, even briefly. Certifications describe how well a server is run, not whether the file reaches one — that's the factor worth checking before you upload something sensitive.
Why in-browser processing removes the question
When a tool does its work entirely inside your browser, your file stays on your device and isn't sent to a server — so certifications, retention windows, and server locations stop being relevant.
That's the model Vikone uses for redaction: the file stays on your device, and you can confirm it yourself.
How to verify any tool yourself
You don't have to take anyone's word for it. Two quick checks tell you whether a file leaves your device:
Go offline
Disconnect from the internet and try the tool. If it still works, the processing is happening locally — nothing is being uploaded.
Watch the Network panel
Open your browser's developer tools, go to the Network tab, and run the tool. If you see your file being sent in a request, it's leaving your device.
When using PDF Candy is perfectly fine
Plenty of tasks don't need browser-only processing:
- Non-sensitive documents — public forms, drafts, throwaway files.
- Quick conversions where the content isn't confidential.
- Using the desktop app, which keeps files local.
For anything sensitive that you'd rather not upload, an in-browser tool sidesteps the question entirely.
Need to redact something sensitive?
Vikone redacts PDFs entirely in your browser — the file stays on your device.
Open the redaction toolCommon questions about PDF Candy
Does PDF Candy upload my files?
Its web tools do — your file goes to ISO 27001-certified EU/US servers, is processed with AES encryption, and deleted within two hours. Its desktop app processes locally without uploading.
Does PDF Candy store my files?
Files handled by the web tools are deleted within two hours, per its policy. The desktop app keeps files on your own machine.
Can I use PDF Candy for confidential documents?
For confidential files, prefer the desktop app or an in-browser tool, so the file isn't sent to a server at all. The web tools are fine for non-sensitive material.
What's a more private alternative for redaction?
A tool that processes in your browser keeps the file on your device. Vikone's redaction works this way, and you can verify it by going offline.