This page explains, in plain language, how your documents are handled: where they live, what is locked, who can see what, how long anything is kept, and which controls you can switch on or off. If someone asks you “is this safe to use for my clients?”, this is the page to send them.
Opening, editing, filling and signing a PDF all happen inside your browser. For those tools the document is never sent to us at all.
Anything that does need a server — your account, documents you choose to save, live signing sessions — is stored in Toronto.
Every page and every upload travels over an encrypted connection. Plain, unencrypted requests are redirected automatically.
Identity photos are encrypted where they are stored, with the key held separately from the database.
An ID photo is destroyed the moment the host has checked it. Nobody has to remember to delete anything.
Every meaningful action in a signing session — who joined, who consented, who signed, who checked an ID — is written to a record you can export.
One switch on your account blocks every AI feature. It is enforced on our servers, not just hidden in the menus.
We keep a scrambled, one-way version of your password. Nobody here can read it, including us.
Full detail in the Identity Verification & Biometrics Policy.
| You can… | How |
|---|---|
| Turn off all AI features | A switch in your account. While it is on, nothing from your documents goes to an AI provider — the server refuses those requests outright. |
| Skip identity checks entirely | Identity verification is off unless you turn it on for a session. |
| Keep an ID image if your profession requires it | Choose to retain it when you review, and give a reason. The reason is written into the session record. |
| Decide whether a session is recorded | Recording is controlled by the host and everyone is told before they join. |
| Set how long things are kept | Retention periods are set on your account and enforced automatically every day. |
| Export the evidence | Download the full session record as a PDF or spreadsheet whenever you need it. |
| Delete everything | Delete a single document, or close your account and have it all removed. |
We would rather tell you what we have not done than let you assume it. As of today:
If your organisation needs any of these before it can approve a supplier, tell us — it helps us decide what to do next, and we would rather have that conversation early than be discovered later.
If information is ever exposed, we record it, assess how serious it is, and where there is a real risk of harm we notify the people affected and the relevant privacy regulator, including Quebec’s Commission d’accès à l’information. The full procedure is in the Privacy Impact Assessment.
These are the rest of the documents behind how the product works. Share this section with anyone who needs the detail.
Anything on this page, or a request about your own information: ezpdfeditor@aicanadiansolutions.ca. We answer access and deletion requests within 30 days, free of charge.