Security Overview

Browser-based tools reduce exposure

Tools such as Merge PDF, Split PDF, Organize PDF, Compress PDF, Sign PDF, JPG to PNG, PNG to JPG, WebP to JPG, HEIC to JPG, Compress Image, Resize Image, and Crop Image are designed to run in the browser during normal use. Those workflows do not need to upload the working file to Filechanges servers.

Server-assisted AI tools are different

AI Translate and AI Summarize can send text or uploaded documents to Filechanges server routes for the active request. In the current app code, extracted text is then passed to a locally hosted AI runtime in the server environment rather than a third-party hosted AI API by default.

That means the content leaves your device for those AI workflows. If you need a strictly local path, use the browser-based tools or the offline summarizer mode instead of server-assisted AI.

Operational safeguards

• Browser-only tools avoid server-side file storage because the work happens on your device.
• Server-assisted tools are scoped to the active request instead of creating a shared user file library.
• The app code does not intentionally save uploaded source files as permanent downloadable files on Filechanges servers.
• Security-sensitive users should still treat any internet-connected workflow as higher exposure than a browser-only workflow.

What users should do

• Prefer the tools that clearly say they run in your browser when handling sensitive contracts, IDs, or private records.
• Reset the tool, refresh the page, or close the tab when you are done with a browser-based workflow.
• Avoid AI-assisted uploads for documents you do not want processed in the server environment.
• Keep your own backups before editing or converting important files.