Security and file handling

PDF processing has real security risks, so ClariPDF keeps validation, processing, retention, and download access separated.

• Uploads are checked by extension, MIME type, and file signature where supported.
• Files are intended to use random, non-guessable job identifiers and temporary download links.
• Files are automatically deleted after 60 minutes.
• Heavy conversions such as OCR should run in isolated queues with processing limits.
• Job and download URLs are not public browsing pages.
• Passwords and sensitive options should never be logged in production.