Skip to content
PDFBetter

Guide · Security & privacy

How to use AI on confidential documents

Reviewed

Hand holding a small brass padlock against a dark background

Short answer

To use AI on confidential documents, first check you're allowed to send the text to a third-party processor, then share as little as possible — redact personal data and extract only the pages you need — and choose processing that matches the risk. In PDFBetter, browser tools never upload the file, and Private AI mode (Settings → Data & privacy) keeps no text index, embeddings or chat history after each request and can send model calls to an endpoint your operator runs.

On this page (6)

1. Check what you're allowed to do

Confidentiality agreements, client terms and data-protection rules can forbid sending a document's text to an outside service. If they do, no setting changes that; keep to tools that run in your browser, or use private mode only where the operator has configured their own model endpoint.

  1. 1Your PDF

  2. 2Ask or summarize

  3. 3Answers that cite pages

What Chat with PDF does, in three steps.

2. Share less

Redact names, ID numbers, card numbers and IBANs the AI doesn't need, with AI redaction review or the manual Redact tool. Pull out only the relevant pages with Extract pages before you ask about them. A smaller, cleaner document is also cheaper and faster to process.

3. Turn on Private AI

  1. 1

    Open Settings → Data & privacy

    Find “AI processing mode”.

  2. 2

    Choose Private AI

    Switching deletes the stored AI index for every document you own right away. Your documents themselves aren't touched.

  3. 3

    Read the endpoint line

    It says whether model calls in private mode go to an operator-run endpoint or to the hosted AI provider with storage turned off.

  4. 4

    Decide on chat history

    Turn off “Save AI chat history” and use “Delete stored AI index now” whenever you want derived data gone.

What private mode does and doesn't change

Private mode controls what is kept after a request. Without an operator-run endpoint, document text still goes to the hosted AI provider (with storage turned off). Your uploaded files stay in your workspace until you delete them. Chat doesn't remember earlier questions, and search by meaning falls back to keyword search unless the private endpoint provides embeddings.

PDFBetter makes no compliance or certification claims for private mode and doesn't sign BAAs.

Tools used in this guide

Questions people ask

Which PDFBetter tools never upload my file?

Browser tools such as merge, split, rotate, extract pages and images to PDF run on your device. Each tool page says where processing happens.

Are my documents used to train AI models?

PDFBetter doesn't train models on your documents, and the hosted provider's API terms by default exclude API data from training.

Does private mode cost more?

No. AI actions cost the same credits; private mode re-reads the document on each request instead of reusing a stored index.

Can my company run its own model?

The operator of a PDFBetter deployment can configure a private, OpenAI-compatible endpoint such as a self-hosted vLLM or Ollama server. Features that send page images need that endpoint to accept images.