The Multi-Tenant Threat Model of Cloud PDF Converters
Commercial cloud conversion platforms such as Smallpdf, iLovePDF, Sejda, and PDF2Go process millions of files daily by ingesting user documents onto remote Linux virtual machines hosted on public clouds. When a user uploads a sensitive contract, tax return, or medical diagnostic chart, the file traverses intermediate reverse proxies, load balancers, and temporary disk storage buffers. While providers promise ephemeral storage with automatic deletion within 60 to 120 minutes, cybersecurity forensics demonstrates that unlinking file pointers does not overwrite underlying non-volatile flash storage blocks.
Furthermore, centralized cloud architectures create systemic exposure to multi-tenant vulnerabilities, server crash core dumps, third-party log aggregation services (such as Sentry and Datadog), and US CLOUD Act administrative subpoenas. Transmitting proprietary trade secrets or privileged legal work-product across the internet introduces severe liabilities under GDPR Article 28, HIPAA Security Rules, and attorney ethical canons.