Security & Compliance

Last updated: January 2025

At ConvertFast, security is not an afterthought — it's built into every layer of our platform. We take the protection of your files and data seriously.

Auto-Delete

All files are automatically deleted within 10 minutes after processing.

File Validation

All uploads are validated for type, size, and content to prevent malicious files.

Sanitized Filenames

All filenames are sanitized to prevent path traversal and injection attacks.

Blocked Executables

Executable files (.exe, .bat, .sh, .php, etc.) are strictly blocked from upload.

File Processing Security

When you upload a file to ConvertFast, here's what happens:

  • MIME Type Validation: We verify the file's MIME type matches supported formats. We do not rely on client-side validation alone.
  • File Size Enforcement: Files exceeding the 10MB limit are rejected before processing.
  • Filename Sanitization: All filenames are stripped of dangerous characters, path components, and null bytes to prevent security exploits.
  • Isolated Processing: Each file conversion is processed independently. Files from different users are never mixed or accessible to others.
  • Automatic Cleanup: A scheduled cleanup process runs every 5 minutes to remove all temporary files that exceed the retention period.
Data Privacy
  • We do not read, analyze, or store your file contents beyond what is necessary for conversion.
  • We do not share your files with any third parties.
  • We do not require any personal information or user accounts.
  • No file metadata or content is logged by our systems.
Infrastructure Security
  • Server-side processing: All conversions happen on our servers — no files are processed in the browser.
  • Input validation: All user inputs, including file data and form fields, are validated and sanitized.
  • Error handling: All operations include comprehensive error handling to prevent information leakage.
  • Dependency management: We regularly review and update our dependencies to address known vulnerabilities.
System Status

You can monitor the real-time status of ConvertFast, including uptime history and any ongoing incidents, on our public status page:

View System Status
Reporting Security Issues

If you discover a security vulnerability or have concerns about our security practices, please contact us immediately at:

email@fileconvertfast.com

We take all security reports seriously and will respond promptly.