La sécurité chez Pagivo PDF

Your files never stay with us

• When you run a tool, your file is processed in memory on the server and the result is returned straight back to your browser.
• Your files are not stored on our server - everything is removed as soon as the analysis finishes.
• We never read, index, share, or use the contents of your files for anything else.

Downloads stay private

• Download responses are served with Cache-Control: no-store so your browser does not keep copies.
• Download links only ever work for the session that created the result - they cannot be shared.
• Search engines are told not to index download responses (X-Robots-Tag: noindex, nofollow, noarchive).

Account security

• Passwords are hashed using scrypt - we cannot recover your password.
• Google sign-in uses OAuth 2.0 / OIDC - we never receive your Google password.
• CSRF protection is applied to all state-changing requests.
• Payment data is handled exclusively by Stripe - we never see card numbers.

Reporting a vulnerability

If you discover a security issue, please disclose it responsibly by contacting us directly. Please do not publish details publicly until we have had a chance to investigate and remediate.