Send a PDF with a link nobody else can open — not even Bindery
AES-256 sealed on your device; the key travels in the link fragment, expiry and download caps built in.
Free: 3 jobs per UTC day, 25 MB per file. PDF exports include a visible Made with Bindery watermark. Pro exports clean PDFs.
Prefer the full studio? Open Send PDF securely in the app →
Most “secure share” links are just links to a server that holds your file in the clear. Bindery seals the PDF in your browser with a fresh AES-256-GCM key, uploads only the sealed package, and puts the key after the # in the link — the part of a URL browsers never send to any server. Bindery’s storage holds bytes it cannot decrypt, not even the file name.
Links expire (1, 7 or 30 days) and stop after a chosen number of downloads; the package is deleted when either limit is reached. Recipients open the link in any browser, the file is decrypted on their device and lands straight in Bindery’s tools. Creating links needs an account; opening them does not. Bindery runs entirely in your browser — your file is never uploaded, so there is nothing to delete from a server afterwards.
How it works
- Drop the PDF and open Secure handoff (or use “Send with a secure link” on any result)
- Pick the expiry and download limit — the file is sealed and uploaded as ciphertext
- Copy the link and send it by whatever channel you trust
Sealed before it leaves, opened only by the link holder
Most “secure share” links point to a server that holds the file in the clear. Bindery seals the PDF in your browser with a fresh AES-256-GCM key, uploads only the sealed package, and puts the key after the # in the link — the fragment, which browsers never send to any server. Bindery’s storage holds bytes it cannot decrypt, not even the file name. The recipient opens the link in any browser, the file is decrypted on their device, and it lands straight in Bindery’s tools. Links expire after 1, 7 or 30 days and stop after a chosen number of downloads; the package is deleted when either limit is reached.
- Contracts and offers that should not sit in an inbox indefinitely.
- Medical, financial and HR documents where an attachment is the wrong channel.
- Large files that mail servers reject — the link carries any size the plan allows.
What the link is, and what it is not
Anyone with the full link can open the file until it expires or hits its download cap — the same property every link has, which is why both limits exist and default to 7 days and 10 downloads. Use one download for the strictest handoff and send the link by a channel you trust. The link does not verify the recipient’s identity; when identity matters, add a password to the PDF first and share the password separately. And because the key never reaches Bindery, a lost link cannot be recovered — create a new one from the original file.
Sealed links versus ordinary sharing
| Send securely | Bindery | Upload-based tools |
|---|---|---|
| Where the file is processed | In your browser tab, on your device | Uploaded to the service’s servers |
| What the server holds | Ciphertext only; the key is in the link fragment | The readable file |
| Expiry and caps | 1, 7 or 30 days; download limit; deleted at either | Varies |
| Recipient | Any browser, no account | Often an account |
| What exists afterwards | The original and the new file, both on your device | A server copy until the retention window ends |
| Works offline | Yes, once the app has loaded | No |
Questions people ask
What can Bindery see?
A sealed package, its size, when it expires and how often it was fetched. The key is never sent to Bindery — it lives only in the link fragment — so neither the document nor its name is readable server-side.
What if the link leaks?
Anyone with the full link can open the file until it expires or the download limit is reached — the same as with any link; that is why both limits exist and default to 7 days and 10 downloads. Use 1 download for the strictest handoff.
Does the recipient need an account?
No. The link opens in any modern browser and the file is decrypted there; an account is only needed to create links.
Do I need an account to send?
Creating a link needs a Bindery account; opening one does not. Handoff links are included on every plan.
Can Bindery, or a subpoena, read the file?
Bindery stores a sealed package, its size, its expiry and a download count. Without the key from the link there is nothing readable to hand over; the security page lists exactly what is retained.
What if the recipient has slow internet?
The sealed package is the same size as the PDF. Compress the file first if it is large; the sealing adds almost nothing.