A fair answer
Is iLovePDF safe?
For everyday documents, yes: it is an established, certified company with a short deletion window, and nothing suggests it mishandles files. For confidential ones, the useful question is not whether iLovePDF is trustworthy. It is whether that document should be uploaded to anyone — because that is how iLovePDF, like most online PDF tools, works.
1. What iLovePDF says it does
From iLovePDF's own security page, checked 22 September 2026:
| Company | Based in Barcelona, Spain |
|---|---|
| File deletion | Processed files "automatically and permanently deleted within two hours"; can be deleted sooner from the download screen |
| Signed documents | Retained for up to five years, for legal compliance |
| Encryption | HTTPS; the page also describes end-to-end encryption |
| Certification | ISO/IEC 27001 |
| Regulation | States full GDPR compliance; uses eIDAS qualified trust service providers for signatures |
| Data sales | "We do not sell your data to third parties" |
| Server location | Not stated; infrastructure is described as cloud partnerships with an unnamed storage provider |
That is a better record than most of the category. Read it at the source: ilovepdf.com/help/security.
2. What those promises can and cannot cover
- HTTPS protects the file on the way. It ends at the server, where the file must be decrypted — software cannot merge or compress a document it cannot read. Whatever "end-to-end" means in the policy, it cannot mean the service is unable to read what it processes.
- Two-hour deletion is a policy. A good one, and very likely kept. It is still something you accept rather than verify, and it cannot speak for backups, logs or error reports that exist inside the window.
- Signatures are the exception. A signed document is kept for up to five years. That is a legal requirement, not a lapse, but it matters if you assumed everything is gone in two hours.
- Where the servers are is unstated. For most people irrelevant; for anyone bound by data-residency rules, a question to settle before uploading.
None of this is a criticism of iLovePDF in particular. It is what uploading means, at any provider.
3. When it is a good choice, and when it is not
A reasonable choice for
- Everyday files you would email without thinking
- Heavy conversions on an old or low-powered device
- Legally backed e-signatures through its signing service
- Teams already using its accounts and integrations
Think twice for
- Passports, IDs, bank statements, payslips, tax returns
- Medical and legal documents
- Anything under NDA or a client confidentiality duty
- Anything covered by GDPR or HIPAA where you are not entitled to share it
4. Check it yourself — for any PDF site
Open developer tools (F12), select the Network tab, clear it, and run a job. An upload appears as a request roughly the size of your file. On iLovePDF you will see one, as expected. On a tool that processes in the browser you will not. The same thirty seconds works on every site, this one included — more in are online PDF tools safe? We ran a measured version of it on iLovePDF and ten other tools in the PDF upload test.
How Filozy differs
Filozy runs its tools in your browser, so there is no upload to delete later — merge, split, compress, convert, redact and the rest happen on your device. That makes it the better fit for the "think twice" column above.
Where iLovePDF is the better choice, we would rather say so: its signing service produces a certificate-backed, legally recognised signature, where Filozy's Sign PDF places a visual signature only. It also has accounts, cloud storage and team features that a no-account tool deliberately lacks. For the tool-by-tool comparison, see Filozy as an iLovePDF alternative; to confirm nothing here is uploaded, check it yourself.
Common questions
- Is iLovePDF safe to use?
- For everyday documents, yes. iLovePDF is an established company based in Barcelona that states it is ISO/IEC 27001 certified and GDPR compliant, uses HTTPS, and permanently deletes processed files within two hours. The caveat is structural rather than specific to iLovePDF: it works by uploading your file to its servers, so for confidential documents you are relying on a deletion policy you cannot verify from outside.
- Is iLovePDF safe for confidential documents?
- It depends on how confidential, and on whether you are allowed to send the document to a third party at all. iLovePDF's security record is good, but every file you process is transmitted to and decrypted on its servers. For bank statements, IDs, medical records, contracts under NDA or anything covered by GDPR or a client duty, a tool that processes the file in your browser avoids the transfer entirely.
- How long does iLovePDF keep my files?
- According to its security page, files processed on the platform are automatically and permanently deleted within two hours, and you can delete them sooner from the download screen. The exception is signed documents: iLovePDF states it retains those for up to five years to meet legal requirements.
- Does iLovePDF upload my files?
- Yes. Like most online PDF services, iLovePDF processes documents on its servers, so the file is uploaded, processed there and returned to you. You can confirm this yourself by opening your browser's developer tools, choosing the Network tab, and running a job: the upload appears as a request about the size of your file.
- What is a safer alternative to iLovePDF for private documents?
- A tool that does the work on your own device. Browser-based tools such as Filozy process PDFs inside the browser tab so the file is never transmitted, and desktop applications such as PDFsam Basic or macOS Preview work entirely offline. For a legally backed electronic signature, though, iLovePDF's signing service is the stronger choice, because a browser-only signature is a visual mark rather than a certificate.