Comparison · Comparison · PDF tools
Free online PDF tools or professional tools: what changes with confidential documents
Anonimatum Team
In short
For a flyer, a free PDF tool is fine. For a contract, a payslip or a case file, what matters is where the file is processed, how long it is kept, what the terms say and whether redaction actually removes the text.
Merging two PDFs, compressing a scan or turning a Word file into a PDF is something most people do with the first free website a search engine shows them. It works, and for many documents there is no problem at all. The question changes when the file is a contract with bank details, a payslip, a medical report or a case file with other people's data.
This comparison is about categories, not brands: general-purpose free online PDF tools on one side, and professional tools built for confidential documents, hosted in the EU and covered by a processor contract, on the other. We go through what to ask any tool before uploading something sensitive.
Two categories, not two brands
Free online PDF tools range widely: reputable services with sound terms, others funded by advertising or by upselling paid plans, and some of unclear origin. Equally, not every paid tool is suitable for personal data. A list of good and bad vendors is less useful than a set of criteria you can apply to any option.
A professional tool for confidential documents shows itself by how it answers those criteria: where it processes, what it keeps, which contract it offers, whether redaction is irreversible and whether there is an audit trail. If you want specific comparisons, we have dedicated pages such as an EU-hosted alternative to iLovePDF and Adobe Acrobat's redaction compared.
Where the file is processed and who handles it
There are two technical models. In one, the PDF is uploaded to the provider's server, transformed and sent back. In the other, processing happens in your browser and the file never leaves your device. The second reduces exposure, but it is not always clear which model a website uses, or whether every feature uses it.
If the file goes to a server and contains personal data, the provider is processing that data on your organisation's behalf: it is a processor, and Article 28 of the UK GDPR and EU GDPR requires a contract covering instructions, confidentiality, security, sub-processors and deletion at the end. A free website used without an account, with terms accepted in one click, rarely meets that standard. If the server sits outside the UK or EEA, you also have a restricted transfer that needs a Chapter V mechanism.
Retention, terms of use and business model
Many services say they delete files after a while. That is a good sign, but read the small print: check the provider's terms to see how long files and logs are kept, whether backups exist, whether staff can access content and whether it can be used for other purposes.
- Where are the servers, and who provides support?
- How long are uploads, results and logs retained?
- Is there a processor agreement under Article 28 and a list of sub-processors?
- How is the free service funded, and what do its terms allow?
- Can your organisation control who uses the tool and with which accounts?
Redaction that actually removes the text
This is where generic tools fail most often. Drawing a black box over a name or colouring text black does not remove the content: it is still in the text layer, and copying and pasting, searching or opening the file in another program reveals it. The same applies to the OCR layer of a scan, metadata (author, title, file paths), comments, bookmarks and form fields.
The ICO's guidance on disclosing information safely warns about exactly this: text hidden by formatting stays in the source file, and electronic changes can sometimes be reversed. In July 2025 it added practical guidance on checking for hidden content before publishing. Proper redaction replaces the content, flattens the result and cleans what you cannot see. For the invisible part, see how to remove metadata from a PDF before sharing it.
How to check the result
Quick test after redacting
- Search the output PDF for a name or ID number you redacted: it must not appear.
- Select the redacted area and copy: no text should paste.
- Check document properties: no author, paths or titles with personal data.
- Review comments, bookmarks, attachments and form fields.
- If it was a scan, confirm the OCR layer does not keep the original text.
Batch processing, review and audit
Free tools are designed for one file at a time. A team handling hundreds of documents a month needs batch processing, templates per document type, human review before changes are applied, and a log that answers the question who redacted what, and when. The accountability principle in Article 5(2) expects you to be able to show how data was handled, and in US healthcare a vendor handling protected health information generally needs a HIPAA business associate agreement.
Side-by-side comparison
| Criterion | Free online PDF tool | Professional EU-hosted tool |
|---|---|---|
| Where files are processed | Provider's server or browser; sometimes unclear | Identified servers in the EU |
| Processor contract (Art. 28) | Usually general terms, no contract | Processor contract and known sub-processors |
| Retention | Per terms; automatic deletion varies | Agreed and documented |
| Redaction | Often just a box drawn on top or basic editing | Irreversible removal of text, OCR layer and metadata |
| Personal data detection | Manual | Automatic, with human review |
| Batch | One by one or capped | Server-side batches |
| Audit | None | Team activity log |
| Cost | Free or cheap plans | Subscription |
When a free tool is enough, and when it is not
- A free tool is fine for: public material, brochures, presentations with no personal data, or your own documents with no third-party information.
- Use a professional tool for: contracts, payslips, medical records, case files, decisions, tender documents, subject access responses and anything with third-party data or professional confidentiality.
Anonimatum belongs to the second group: it combines secure PDF tools on EU servers (merge, split, compress, OCR, convert, sign…), irreversible redaction with automatic detection by AI and pattern rules, metadata removal, batches and an audit log in the group dashboard. To weigh how much manual effort automatic detection saves, read manual vs automatic anonymisation.
Frequently asked questions
Is it unlawful to use a free PDF tool for work documents?
Not in itself. What matters is whether the document contains personal or confidential data. If it does, your organisation must be able to show the provider gives sufficient guarantees under Article 28, where data is processed and how long it is kept.
Are browser-based PDF tools safe?
They reduce exposure because the file is not uploaded, but confirm that every feature you use works that way and that redaction truly removes text. A badly redacted file is a risk wherever it was processed.
Is drawing a black box and exporting to PDF enough?
Not always. Depending on how it is exported, the text may remain in the file. Always test by searching and copying the redacted text, and check metadata and hidden layers.
What should I ask a professional provider?
Server location, a processor contract, the sub-processor list, retention periods, verifiable irreversible redaction, batch processing and an audit log.
Handle confidential PDFs without leaving the EU
Choose a plan and start redacting irreversibly, removing metadata and processing document batches on European servers.