Security

PDF processing runs asynchronously through Redis and isolated worker containers. Files are kept in private storage, downloads are session-bound, and worker execution uses fixed command arguments with timeouts.

• Non-root worker process with dropped Linux capabilities.
• Short anonymous retention window and cleanup command.
• Structured security logs without storing document contents.
• Architecture aligned with GDPR and ISO/IEC 27001 control expectations.

PDFWorks is operated by MDSolutions Miljantejs (mdsolutions.swiss). To report a security issue, email info@mdsolutions.swiss. PDFWorks does not claim ISO/IEC 27001 certification; the architecture is aligned with those control expectations but not independently certified.