Security and Compliance
How Ebook2Edit keeps your files safe
Your files travel encrypted, are processed automatically, and are deleted on a schedule. Here is how we protect them and what you can do yourself.
What happens to your file
Three steps, from your browser to deletion.
-
Uploaded over an encrypted connection
Your file is sent from your browser to our servers over TLS with modern ciphers, so it cannot be read in transit.
-
Processed automatically
Our servers do the work automatically and use full-disk encryption. Your file is stored in Europe and delivered through a global content delivery network. The link to your result is generated at random, so it cannot be guessed.
-
Deleted automatically
Files you convert are deleted automatically according to our privacy policy schedule. You can also delete a file yourself at any time.
Without an account, your work in the workspace is deleted after about an hour. With a free account, you keep your designs until you delete them.
Data Security and Compliance
Encryption
We use modern encryption protocols to protect your information during transmission and storage. Data from your browser to our servers is encrypted with TLS using modern ciphers. Personal data is stored in encrypted form.
GDPR
We process personal data under the EU General Data Protection Regulation (GDPR), and our privacy policy sets out what we process, why, and who receives it.
Payment Information
We work with Stripe and PayPal for payment processing. Both are certified under the Payment Card Industry Data Security Standards (PCI DSS). They handle payments securely on our behalf, so credit card numbers are never disclosed to us.
No AI training on files
Your files are not used to train AI models, and they remain yours.
Your account, your controls
What you can do yourself from your account settings.
Connected integrations
See which third-party integrations and cloud storage services are connected to your account, and revoke their access at any time.
Sign out everywhere
End every session on all your devices at once, for example after signing in on a shared computer.
A copy of your data
Download an archive of everything we hold about your account, including who receives your data and why.
Delete your files and your account
Delete a file whenever you want. Closing your account signs you out everywhere and schedules the account for deletion.
Network and Infrastructure Security
Network Communications
Our network uses advanced technologies to defend against threats. With a Content Delivery Network (CDN), we provide fast and secure data access. Security measures such as DDoS protection help safeguard your information. This secure environment protects your data from evolving threats and helps ensure reliable access.
Network Security
We use advanced technologies and security controls to protect against unauthorized access, data breaches, and cyber threats. Our multi-layered setup includes firewalls, intrusion detection, and encryption to secure your data in transit and at rest. Continuous monitoring and updates to our defenses help keep our network secure and resilient.
Availability & Fault Tolerance
We use redundant systems, real-time monitoring, and a resilient architecture to reduce downtime and keep services available. In case of unexpected events or system failures, our fault-tolerant design helps maintain continuous operations and data integrity.
Controlled Physical Access
We control physical access to our facilities and require the same from our data centers. Restricted entry points, biometric authentication, surveillance, and detailed access logs are key parts of our physical security measures.
Scalability
Our infrastructure scales easily to handle peak traffic and increased demand. Founded in 2011, we have experience managing high-traffic projects, including during unforeseen events.
Internal Security Practices
Principle of Least Privilege
We apply the principle of least privilege as a core part of our security strategy. This ensures that individuals, systems, and processes receive only the minimum level of access needed to perform their tasks.
Development Principles
Our development principles guide how we build secure and stable systems. We prioritize security from the start of the software development lifecycle and follow practices such as secure coding, code reviews, and both manual and automated testing.
Organizational Principles
We foster a culture of accountability, transparency, and continuous improvement across our organization. Our teams follow high ethical standards to ensure responsible handling of your data. Regular audits, training programs, and policy reviews support our efforts to maintain a secure environment.
Employee Onboarding and Offboarding
Comprehensive training and access controls, together with a structured offboarding process, help ensure that only authorized personnel can access sensitive information.
Report a security issue or illegal content
Security vulnerabilities
Found a vulnerability? Email us the steps to reproduce it, and give us reasonable time to fix it before you make it public.
time2help@ebook2edit.comIllegal or infringing content
Anyone can report content they consider illegal. You do not need an account and you do not need to sign in. If you give us an email address we will confirm that we received your report, and we will tell you what we decided about it.
To learn more about how we handle your data, please see our Privacy Policy.
Frequently Asked Questions
Is it safe to upload my files to Ebook2Edit?
Yes. Your file travels over an encrypted connection (TLS) to servers that use full-disk encryption, and the link to your result is generated at random, so it cannot be guessed. Your files are stored in Europe and delivered through a global content delivery network, and they are not used to train AI models.
How long do you keep my files?
Files you convert are deleted automatically, on the schedule our privacy policy sets out, and you can delete a file yourself sooner. Without an account, your work in the workspace is deleted after about an hour. With a free account, you keep your designs until you delete them.
Do you keep backups of my files?
We make no backups of the files you transmit for conversion. Encrypted backups of our databases are kept for up to 60 days.
Can I get a data processing agreement (DPA)?
Yes. You can download it from the GDPR section of this page.
Who handles my payment details?
Stripe and PayPal process payments for us. Both are certified under the Payment Card Industry Data Security Standard (PCI DSS) and handle payments on our behalf, so your card number is never disclosed to us.
How do I report a security vulnerability?
Email time2help@ebook2edit.com with the steps to reproduce it, and give us reasonable time to fix it before you make it public.
How do I report illegal content?
Use the Report illegal content form linked on this page. Anyone can report content they consider illegal, and you do not need an account.