Security and Data Processing
This section of PDF Candy reveals the information on how we safeguard your data. Read about the security protocols and practices, all aimed at maintaining your data’s privacy and protection.
ISO Certified Data Centers
PDF Candy operates on ISO 27001-certified infrastructure from leading cloud providers and data centers, ensuring robust information security at every stage of document handling. Servers are based in the EU and USA, offering safe file storage within regions known for strict privacy regulations.
GDPR
Our platform complies with GDPR and other data protection laws, ensuring your information is handled legally and transparently. We use strong security measures to prevent unauthorized access. Uploaded and created documents are deleted from our servers within 2 hours after processing.
Data Encryption
All file transfers on PDF Candy use secure HTTPS connections with the latest TLS and SSL protocols to prevent interception. Once received, documents are encrypted using 256-bit AES both in transit and at rest, ensuring protection during processing and storage.
Data Retention and Removal
To comply with GDPR and protect your privacy, our platform automatically deletes all uploaded and created files within 2 hours. You can request early removal anytime, and the document will be permanently deleted from our servers, ensuring it cannot be recovered or accessed thereafter.
Privacy Protection
PDF Candy protects your documents and data transfers using strong encryption and secure servers. Creating an account or sharing personal information is only required if you sign up after the free usage limit. When you register, your data is kept safe and never shared or sold for commercial purposes.
Credit Card Safety
All credit card payments are handled by trusted, PCI DSS-compliant gateways for strong financial security. Transactions are encrypted with 256-bit SSL/TLS to prevent unauthorized access. PDF Candy never stores your card number, expiration date, or CVV, and all data is sent securely via HTTPS.
Frequently Asked Questions
How does PDF Candy ensure internal security?
We maintain strict internal security measures, including regular employee training on data protection, role-based access controls, and continuous monitoring of our systems. Only authorized personnel have access to sensitive data, and all actions are logged and audited to ensure maximum accountability and security within our organization.
Is PDF Candy CCPA compliant?
Yes, we comply with the requirements of the California Consumer Privacy Act (CCPA). We provide California residents with transparency regarding the collection, use, and sharing of their personal information and offer the necessary rights to access, delete, or opt out of the sale of their data.
How secure is PDF Candy Desktop software?
PDF Candy Desktop for Windows uses advanced security to protect your files and data. All processing happens locally on your PC, keeping your documents private. We regularly release updates with the latest security patches, performance improvements, and bug fixes.
Is PDF Candy HIPAA compliant?
Yes, our service is fully HIPAA compliant. We follow all requirements set forth by the Health Insurance Portability and Accountability Act (HIPAA) to protect your sensitive health information. This includes strict data encryption, secure storage and transmission, access controls, and comprehensive privacy policies to ensure the confidentiality and safety of Protected Health Information (PHI) at all times.
Does PDF Candy perform regular vulnerability testing on the systems?
Yes, we conduct regular vulnerability assessments and penetration testing on all our systems and infrastructure. This proactive approach helps us identify, address, and remediate any potential security weaknesses before they can be exploited, ensuring your data remains protected at all times.
How does PDF Candy detect and respond to security incidents?
We have a robust incident detection and response program in place. Our systems are continuously monitored using advanced security tools that can quickly identify suspicious activities. In the event of a potential security incident, our dedicated response team acts immediately to contain, investigate, and resolve the issue, all while keeping users informed and protected.
Does PDF Candy use CDN?
Yes, we utilize reputable Content Delivery Networks (CDNs) to deliver and process files efficiently and securely. Our CDNs are selected for their strong security measures, ensuring your documents are distributed with optimal speed and reliable protection, regardless of your location.
How does PDF Candy ensure the physical security of the servers and data centers?
We partner only with data centers and cloud providers that maintain the highest standards of physical security. These facilities are protected by multiple security measures - including 24/7 on-site surveillance, controlled access points, biometric authentication, and redundant power and networking systems - ensuring that only authorized personnel can access your data. This comprehensive approach safeguards your information against physical intrusion or unauthorized access.
What secure coding practices does PDF Candy follow during software development?
We adhere to industry best practices in secure coding throughout our Software Development Lifecycle (SDLC). Our development team is trained to identify and mitigate security risks, and all code is regularly reviewed for vulnerabilities before deployment. We conduct frequent security assessments, automated scans, and rigorous testing to ensure our software remains robust and resistant to threats.
How does PDF Candy use cookies?
We use cookies to enhance your experience on our website, provide essential site functionality, and analyze how our service is used so we can continue to improve it. These cookies may also be used for security purposes and to remember your preferences. For more detailed information about the types of cookies we use and how you can manage your preferences, please refer to our Privacy Policy.
