Security

• Uploads are checked for PDF signatures, size, and page count.
• Files are processed in memory and discarded after the request.
• Filenames are sanitized. Internal paths are not returned.
• Rate limits reduce abusive comparison volume.
• Secrets stay in environment variables, never in the client bundle.

Because there are no accounts, another visitor cannot open your comparison unless you send them the result yourself. We do not claim a formal audit.

Source and contact: github.com/Dylan-Texe