Security at File2Format
How we protect your file uploads, maintain secure connections, and safeguard data.
Protecting Your Files
Security and privacy are core requirements for digital utilities. At File2Format, we implement practical engineering measures to protect your files throughout the upload, processing, and download lifecycle.
Secure HTTPS Encrypted Transport
All traffic between your web browser and File2Format is encrypted using industry-standard Transport Layer Security (TLS/HTTPS). This ensures that files, metadata, and API communications cannot be intercepted, monitored, or altered in transit over public or untrusted networks.
Browser-Based & Isolated Processing
Whenever technically feasible, tools process file tasks locally in your browser memory. For conversions requiring server-side libraries (such as complex document parsing or ZIP extraction), processing occurs inside isolated temporary directories on hardened servers.
Files are never exposed to public directories, unauthenticated access, or external database indexes.
Automatic 15-Minute File Deletion
We enforce a strict data retention policy: temporary files generated during conversion sessions are automatically purged from our server storage within 15 minutes of creation.
Our automated cleanup worker routinely deletes expired temporary files, ensuring that no residual user documents or images remain on disk.
Third-Party Cloud Picker Security
Our Google Drive and Dropbox file import integrations utilize official, tokenized OAuth pickers.
When you select a cloud file, File2Format receives access only to that specific user-chosen item. We never request full account permissions, read other files in your cloud storage, or store cloud access tokens.
Defensive Code & Dependency Security
We maintain strict server input validation, MIME-type checks, and XML Entity (XXE) protections across all document parsers to defend against malicious file uploads. We routinely update server packages and PHP dependencies to address potential security vulnerabilities.
Reporting a Security Issue
We welcome responsible disclosure of security vulnerabilities. If you discover a potential security bug or issue on File2Format, please email us directly at support@file2format.com.
Please include clear steps to reproduce the vulnerability. We review all security submissions promptly and work to resolve verified issues.