A lawyer I know — small firm, 4 people — got a new client last month who sent them 47 PDF files. Discovery documents, contracts, correspondence, court filings. All separate files. The firm needed to organize them, add page numbers, merge related documents, and redact some sensitive information before filing.
The paralegal started uploading them to iLovePDF. The senior partner walked by, saw the screen, and lost it. “You’re uploading client confidentiality documents to a website?” The paralegal didn’t think it was a big deal. The partner knew better — that’s a potential ethics violation.
This is more common than people think. Law firms, medical offices, financial advisors — they all handle confidential documents daily, and someone in the office is probably using an online tool that uploads files to a third-party server.
Why this is actually a problem
Legal ethics rules require confidentiality. ABA Model Rule 1.6 requires lawyers to make reasonable efforts to prevent unauthorized disclosure of client information. Uploading a client’s contract to a random PDF website? That’s hard to defend as “reasonable efforts.”
HIPAA for medical documents. If you’re a healthcare provider processing patient documents through an online tool, those PDFs might contain PHI (Protected Health Information). Most online PDF tools are not HIPAA compliant. That’s a violation.
Financial regulations. SOX compliance, PCI DSS, GLBA — if you handle financial data, there are rules about where that data goes. A PDF with account numbers and SSNs shouldn’t be sitting on some company’s server in another country for “up to 24 hours for processing.”
Client trust. Beyond regulations, there’s basic trust. If your clients knew their confidential documents were being uploaded to third-party websites for processing, how would they feel? Most would not be okay with it.
The solution: process everything locally
Tools that run in your browser or on your desktop don’t upload files anywhere. The processing happens on your machine. The files never leave your device.
ConvertKr is one option — everything runs client-side in your browser. But for firms handling large volumes of documents, the desktop app is better. It works completely offline and handles large files faster than a browser.
Common document workflows for legal teams
Merging discovery documents. You receive 30 PDFs from opposing counsel. You need them as one file for review. Merge them locally, add page numbers (courts require Bates numbering or at least sequential numbering), and you’ve got a clean consolidated document without any file leaving your network.
Redacting sensitive information. Before filing publicly or sharing with third parties, you need to black out SSNs, account numbers, or confidential terms. The PDF editor has a whiteout/redact tool. Draw a black rectangle over the sensitive text. It’s baked into the PDF — you can’t undo it or see through it.
Splitting large filings. Court portals often have file size limits — 10MB, 25MB, sometimes as low as 5MB. A 200-page filing with exhibits can be 50MB+. Split it into parts that fit the portal’s limits. Or compress first and see if it fits in one file.
Organizing case files. Documents come in from multiple sources in random order. Witnesses, opposing counsel, your own client, court orders. Organize them — see thumbnails of every page, drag to reorder, delete duplicates or irrelevant pages. Way faster than doing it in Acrobat.
Adding watermarks to drafts. Sharing draft agreements with the other side? Add “DRAFT” across every page. Prevents someone from accidentally (or intentionally) treating a draft as final. Learned about this from the lawyer I mentioned — one of his clients signed a draft contract and caused a mess.
Why not just use Adobe Acrobat?
Acrobat is the gold standard for legal document work. No argument there. It’s also $22.99/month per user. For a 4-person firm that’s $92/month or $1,100/year. For basic document operations — merge, split, compress, number, redact — that’s a lot of money.
Acrobat also processes locally (the desktop version), so there’s no confidentiality issue. If your firm can afford it, use it. But many small firms, solo practitioners, and startups can’t justify the cost for occasional PDF work.
ConvertKr does 80% of what Acrobat does for these basic operations. For free. Locally. The other 20% — OCR, advanced form filling, digital signatures with certificates — you’d need Acrobat or a similar paid tool.
For medical offices
Same principles apply. Patient intake forms as PDFs, insurance documents, referral letters, lab results — all confidential. All need to be merged, organized, or compressed before sending to other providers or insurance companies.
A small clinic I know was using SmallPDF to compress patient documents before faxing (yes, healthcare still uses fax). Every document went through SmallPDF’s servers. They switched to local processing after their compliance officer pointed it out.
For financial advisors
Client portfolios, tax documents, estate planning papers — all contain sensitive financial data. Merging a client’s tax return with their investment statements for review? Do it locally.
SEC and FINRA have specific requirements about handling client data. Using a cloud-based PDF tool probably doesn’t violate any specific rule, but if there’s a breach or a complaint, “we uploaded client documents to a free website” is not a good look.
The “but nothing bad has ever happened” argument
I hear this a lot. “We’ve been using iLovePDF for years and nothing bad happened.” That’s like saying “I’ve been driving without a seatbelt for years and I’m fine.”
Nothing bad happens until it does. A data breach at a PDF tool company. A rogue employee at the processing server. A GDPR or CCPA complaint from a client who finds out. The risk is small but the consequences are severe — malpractice claims, regulatory fines, loss of client trust.
When a free local alternative exists, there’s no reason to take that risk.
Setting up for a firm or office
For individual use, the web version at convertkr.com works fine. Open a browser, use the tool, done.
For an office with multiple people, install the desktop app on each machine. It’s a one-time install, works offline, no account needed. Everyone in the office can use it independently without any server or shared service.
No IT setup. No license management. No subscription renewals. Just install and use.
FAQ
Is browser-based processing really secure?
Yes — when the tool runs entirely in the browser using JavaScript, your files stay in your browser’s memory and are never transmitted over the network. You can verify this by disconnecting from the internet after the page loads and using the tool. If it still works, nothing is being uploaded.
Can I use this for court filings?
The PDFs produced by ConvertKr are standard PDF files. Courts accept them the same as any other PDF. The tool doesn’t add watermarks or modify the content beyond what you specify.
What about digital signatures?
The editor supports basic signatures — draw, type, or upload an image of your signature. For legally-binding digital signatures with certificates (like DocuSign), you’d need a dedicated e-signature platform.
Is there an audit trail?
No — since everything processes locally, there’s no server-side logging. This is actually a privacy advantage. But if you need an audit trail for compliance, you’d want a dedicated document management system.
Need to process confidential documents locally? ConvertKr — browser-based or desktop app. Files never leave your device.