Is Smallpdf safe?
Smallpdf is a reputable Swiss company with published retention rules. What changes the answer for you is which of its storage rules applies to your file.
The short answer
Smallpdf is a large, established PDF service run by Smallpdf AG in Zurich, Switzerland. Its pricing page says it is ISO/IEC 27001 certified, and its privacy notice sets out retention rules. For everyday PDFs, it is a legitimate and reasonable choice.
Like other web PDF services it processes files on its servers, and how long your file stays there depends on what you do with it. Knowing those rules, and knowing that you can avoid the upload entirely for common tasks, is what makes the answer useful.
Smallpdf’s retention rules
As of October 2026, per Smallpdf’s privacy notice:
- With an account: files are deleted within one hour unless you save them to your file storage.
- Saved files: when you delete them from storage, Smallpdf says it generally deletes them within 14 days.
- Without an account: it aims to delete files within a reasonable period after they were last opened, and that period restarts each time you reopen the file.
Its pricing page says documents are processed under TLS encryption and that Smallpdf is ISO/IEC 27001 certified.
Reading those rules for your file
For signed-in users the one-hour window is short, which is a well-designed default. The account storage option is the one to watch: it is convenient, but it means your documents live in a cloud account, protected by your password, until you remove them. Without an account the retention period is less precise, so it is worth knowing which case applies to you.
The general caveat is the same for every upload service: deletion and access controls are commitments about a server you cannot see. For files your job, a client agreement or health privacy law says must stay under your control, choose a tool that does not upload.
Common PDF jobs without uploading
Stayput’s PDF tools run in your browser, so the PDF stays on your device: Compress PDF for oversized scans, Merge PDF to combine documents, PDF to Word to get editable text into a .docx, and Sign PDF to add a signature and date. There is no account and no cloud storage to switch off, because your files are not uploaded.
Smallpdf does things a browser tool cannot, including OCR, team plans and e-signature requests (all listed on its pricing page as of October 2026). If you rely on those, its retention settings are worth a two-minute review; for one-off edits of private documents, local tools avoid the question.
How to see where a file goes
You do not have to take any site’s word, including ours. This guide shows how to watch the browser’s network panel for an upload, and how the airplane-mode test, run after one visit and a short wait, tells you in seconds whether a tool works locally.
Questions
Is Smallpdf legit?
Yes. It is operated by Smallpdf AG in Zurich, Switzerland, is ISO 27001 certified, and is one of the most widely used PDF services.
How long does Smallpdf keep my files?
As of October 2026, per its privacy notice: within one hour for signed-in users unless the file is saved to file storage, and generally within 14 days after you delete a saved file. Without an account it aims to delete within a reasonable period after the file was last opened.
How do I stop Smallpdf storing my documents?
Per its privacy notice, files are deleted within an hour for signed-in users unless you save them to file storage; you can delete saved files yourself.
Can I compress a PDF without uploading it?
Yes. Stayput’s Compress PDF runs inside your browser tab, so your PDF is not uploaded. It keeps working with the network off after one visit and a short wait.