// Trust & Security Report
Shenzhen Wangxu Technology Co., Ltd.
LightPDF is an AI-powered PDF editor, converter, and document processing suite available on Web, Mobile (iOS/Android), Desktop (Windows/Mac), and as browser extensions. Primary products include online PDF editing, conversion, OCR, signing, watermark removal, summarization, and AI chat for documents.
Certifications held
1
Maturity
Growth
Trains on your data
No
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on lightpdf.com“LightPDF adopts 'appropriate technical and organizational measures to help prevent unauthorized access to information and ensure data is held securely' in accordance with GDPR. Third parties required to complete 'Data Security Questionnaires' before receiving personal data.”
> Show 5 unconfirmed / not-held certifications
source: lightpdf.comAbout page claims compliance, but no public certificate, audit report, or proof link from vendor domain found. Privacy Policy and Terms of Service do not mention this certification. Claims appear unverified.
source: lightpdf.comAbout page claims compliance, but no public certificate or proof link from vendor domain found. Not mentioned in Privacy Policy or Terms of Service. Claims appear unverified.
No public evidence of SOC 2 certification found. Not mentioned on vendor website, About page, Privacy Policy, or Terms of Service.
No public evidence of HIPAA compliance found. Healthcare is listed as a use case, but no formal HIPAA certification documented.
No public evidence of PCI DSS certification found.
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Not offered
Data region
Encrypted during transmission and processing. Vendor does not specify data residency region. Legal entity based in China (Shenzhen).
LightPDF's AI Agent product page states 'Your data and the contents of your chats will not be used to train any AI models' and that documents are 'automatically deleted within 24 hours.' Communications are described as end-to-end encrypted. The general privacy policy does not itself address AI training.
// Security controls
Encryption in Transit
Vendor states its AI Agent communications are 'end-to-end encrypted'; the privacy policy references appropriate technical and organizational measures to prevent unauthorized access. No specific TLS/SSL version is documented on the vendor domain.
lightpdf.comEncryption at Rest
Documents are stored temporarily only during processing and then deleted; vendor states communications are end-to-end encrypted. No specific at-rest encryption standard (e.g., AES-256) is published on the vendor's own domain.
lightpdf.comData Retention
Files (including AI Agent documents) automatically deleted within 24 hours of processing per the vendor product page. Privacy policy notes deletion may have latency due to backup storage.
lightpdf.comThird-party Security
Service providers required to complete Data Security Questionnaires. Data sharing with payment processors, analytics providers (Google Analytics, Facebook), and email delivery services. No explicit DPA mentioned.
lightpdf.comBackup & Deletion Policy
Data deletion may be delayed due to backup storage. Data retained to comply with legal obligations.
lightpdf.com// Products & data scope
data: Files uploaded for processing, deleted within 24 hours. No local storage option.
Available at lightpdf.com. Includes edit, convert, OCR, sign, compress, watermark removal, and summarization tools.
data: Primary processing on local machine with optional cloud sync.
Lighter footprint than competitors. Synced across devices with single account.
data: Files processed locally or uploaded to cloud temporarily.
Cross-platform sync available via account.
data: Integration with web tools.
Allows quick PDF editing from browser context.
data: Documents uploaded for AI processing. Not used for model training.
Summarization, Q&A, translation powered by AI. Customer data not used for training.
// What to watch
- OVER-CLAIM DETECTED: About page claims ISO/IEC 27001 and ISO/IEC 27701 certification, but no public certificate, audit report, or proof link found on vendor domain. Privacy Policy and Terms of Service do not reference these certifications. Claims should be verified directly with vendor.
- NO TRUST CENTER: Vendor does not maintain a dedicated trust center or compliance documentation page, unlike competitors (iLovePDF, Lumin, Adobe). All compliance info scattered across product pages.
- DATA RESIDENCY UNCLEAR: Vendor does not specify where data is processed or backed up. Legal entity is in China (Shenzhen), which may raise concerns for regulated industries (healthcare, finance).
- NO DPA DOCUMENTATION: Privacy Policy mentions third-party data sharing but does not reference Data Processing Agreements or standard contractual clauses for international transfers.
- SOC 2 ABSENT: While claimed to be a growth-stage company (1M+ users), no SOC 2 certification found. Not required for consumer tools but increasingly expected for B2B use.
- HIPAA USE CASE NOT BACKED: Healthcare listed as a use case on homepage, but no HIPAA compliance mentioned. Organizations handling PHI should verify independently.
- LIMITED ENTERPRISE DOCUMENTATION: No visible compliance dashboard, audit trail features, or enterprise-grade SLA documentation compared to competitors.
// At a glance
Pricing model
Freemium: limited free tools, Pro subscription with unlimited features. Pricing described as 'half the cost of competitors' (e.g., Adobe).
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Shenzhen Wangxu Technology Co., Ltd.'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-07. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
lightpdf.com