PRIVACY FACT SHEET

Security and file handling

Reviewed 15 October 2026

FileStation is a browser-based PDF and document workspace. The distinction that matters is whether you use a local tool or choose a feature that uploads a file.

Local PDF tools

Local tools process the selected document in your browser. Choosing a file alone does not upload its contents. Download your result before leaving. Your browser, extensions, device backups and download folder have their own access and privacy settings.

Optional account storage

Save to account uploads the selected result or PDF draft. Account access requires sign-in. This is server-side storage, not an end-to-end encrypted vault. Keep an independent backup and see current storage limits on the plans page.

Server conversion

When a server conversion mode is available, it requires upload confirmation. Its processor must read the document to convert it. This differs from local processing and is not end-to-end encryption. Check the mode’s availability and limitations before submitting a file.

Sharing links

Expiring links require a saved PDF and sign-in to create. Choose one hour, 24 hours or seven days, with an optional password. Anyone with the link and password, when set, can download it. Revocation or expiry stops new downloads; neither recalls existing copies nor deletes the owner’s saved PDF. Link passwords control access and do not encrypt the PDF itself.

Connection security and PDF passwords

HTTPS protects data in transit. It does not automatically password-protect downloaded PDFs. Protect PDF is a separate local tool that applies AES-256 encryption when you choose it. Keep the password safe and confirm the output opens as expected.

Claims and limits

FileStation does not claim SOC 2 or ISO 27001 certification, a published independent security audit, guaranteed data residency, a permanent retention guarantee or an uptime SLA. This fact sheet is a description of product behavior, not an audit or compliance certification. For regulated or highly sensitive records, check your organization’s requirements before uploading.

Analytics and technical information

Optional Google Analytics loads after analytics consent. Document contents are not sent to Analytics. Hosting and model-download providers can receive technical connection data. Read the privacy policy for cookies, sign-in recovery, account records, third-party processing and deletion options.

Report a security concern

Email info@filestation.io with the affected feature, steps and browser version. Do not include confidential documents, passwords or access tokens. No guaranteed response time is advertised.

Full privacy policy · Plans and storage limits · Document workflows