Where your data goes — and where it doesn't.
EnvoiOK is local-first. Here's exactly what touches our servers, what we do with it, and where it lives.
Nothing leaves.
In-memory editing
Merge, split, rotate, compress, annotate: it all happens inside the app. Your original file is never modified or sent anywhere.
Never leaves your PCSigning & timestamping
PAdES signatures use your own certificate; the RFC-3161 timestamp call queries a third-party authority without transmitting the document's content.
Never leaves your PCOnly when you trigger it.
A handful of optional features call our servers. Here's exactly what they send, and what we keep.
Account & licence — email, name, business ID
Encrypted at rest (Fernet) in our database; lookups (deduplication, login) go through a keyed HMAC hash — your email and business ID are never stored or compared in plaintext.
Word/Office → PDF conversion (optional, server-assisted)
If you have no local office suite, the file is written to a per-request temp directory, converted, streamed back, and the directory is deleted immediately — nothing is logged or retained beyond the request.
Support form
Your email and message are encrypted at rest, used only to reply to you.
Waitlist (upcoming editions)
Your email is encrypted at rest, used only to notify you when your edition ships.
IP address
Used transiently to route you to the right edition (by country) and to rate-limit abuse — not retained, not used for profiling.
One cookie, purely functional.
This site sets a single cookie: region (France/International), set only when you choose your edition, remembered for 1 year. No advertising, analytics, or tracking cookies — that's why you don't see a consent banner.
Your data stays in Europe.
Our infrastructure runs on Scaleway and netcup, on servers located in Nürnberg, Wien and Paris.
Scaleway 🇫🇷
Cloud provider
netcup 🇩🇪 🇦🇹
Cloud provider
Built on the shoulders of open source.
EnvoiOK wouldn't exist without these projects — including LibreOffice, which powers optional Office → PDF conversion. Thank you.
Qt / PySide6LGPL-3.0
The UI framework and PDF renderer (PDFium) the whole app is built on.
LibreOfficeMPL-2.0
Powers Word/Office → PDF conversion when no local office suite is installed.
pikepdfMPL-2.0
The core engine behind every page operation — merge, split, rotate, reorder.
pyHankoMIT
PAdES digital signatures and RFC 3161 timestamping.
PillowHPND
Image downsampling for PDF compression.
fontToolsMIT
Font subsetting for smaller, compressed PDFs.
factur-xLGPL
Generates and validates Factur-X / EN 16931 e-invoice XML.
pypdfBSD-3
Additional PDF utilities alongside pikepdf.
WeasyPrintBSD-3
HTML → PDF fallback in the conversion pipeline.
mammothBSD-2
.docx → HTML fallback conversion.
pdfminer.sixMIT
Text and layout extraction for the ATS checker.
Access, correction, deletion.
Under GDPR, you can request access to your data, correction, or deletion at any time.
- 📩 Right of access
- ✏️ Right to rectification
- 🗑️ Right to erasure
- 📦 Portability
This page summarizes our practices for transparency — it doesn't replace our Privacy Policy.
Questions about your data?
Our support team answers any question about privacy, hosting, or GDPR.
Contact support