Fill PDF Forms privacy model

This tool is classified as core workload and runs in On-device mode. Current status: beta (fully-functional). Release note: Supports text, checkbox, dropdown, radio fields. XFA forms may not be detected.

What this does

• Applies the selected transformation to the document or exported output.
• Keeps processing local in browser when marked On-device.
• Uses monthly local counters for usage quotas.

What this does not protect

• It does not remove names or sensitive content visible in document text or images.
• It does not guarantee legal anonymity or endpoint compromise protection.
• For hybrid tools, privacy depends on explicit cloud opt-in when enabled.
• XFA-based forms (common in older government PDFs) may not be detected by the field analyzer.
• Some complex form layouts with nested field groups may display field names that look unfamiliar.

Safe workflow defaults

• Verify output manually before sharing.
• Use security guidance at /security for higher-risk scenarios.
• Keep original and transformed files separated to avoid accidental leaks.