Admission first
File, page, geometry, image and estimated-memory limits are checked before worker execution.
Available tools process locally — your documents stay on your device
Browser-Local Document Assurance
With Explicit Boundaries
Inspect, compare, hash, redact supported content, and transform PDFs with visible limits, stable failures, and no document upload.
Local processing boundary
Dedicated worker execution
No document retention
One Assurance Workspace
Thirteen admitted workflows share a browser-local boundary, source/output separation, explicit limitations, and session-local operation history.
Inspect
Separate detected facts, warnings, limitations, and recommendations.
Compare
Compare extracted text, page geometry, annotations, and rendered appearances.
Evidence Manifests
Calculate local SHA-256 hashes without turning them into legal claims.
Permanent Redaction
Reconstruct supported pages and verify bounded image-only output.
Merge PDFs
Combine local PDF files in a selected source-file order.
Split & Extract
Extract pages by range or split into individual files.
Watermark
Apply a text watermark across every page.
Flatten Forms
Flatten supported interactive form fields into page content.
How It Works
Three local steps. No account or document upload.
Step 1
Select
Choose local PDF or image files in the browser.
Step 2
Process
Select your tool and configure settings. Everything runs locally.
Step 3
Save
Use the native save picker or let your browser handle the fallback download.
Built in Governed Layers
AO-PDF exposes the operating boundary before a document is selected and keeps document-derived data out of telemetry.
Controlled execution
A dedicated worker is cancelled or terminated on demand, timeout, navigation and unmount.
Contained telemetry
Only admitted tool, outcome, capped duration and governed error code can enter custom events.
Process the Document, Not the Promise
Choose a local assurance or transformation workflow and review its limits before processing begins.
Get Started Free