Can this document be uploaded?
Answer that first, because it removes most of this category immediately and it is the question people skip.
A PDF passing through a web tool is a contract, a medical record, an invoice with bank details or an internal report. Uploading it is a data transfer, and for a law firm, a clinic or a public body it may be one that policy forbids.
If the answer is no: Stirling PDF, self-hosted with more than 50 operations, OCR and true redaction, MIT-licensed with no telemetry and you as the sole controller. Or PDF24's Windows desktop application, which works entirely offline and is free.
If the answer is yes: Smallpdf with Swiss hosting and hour-long retention, iLovePDF with EU hosting and strong batch processing, or Sejda with two-hour deletion and a desktop option.
What does file retention actually tell you?
How long your document is somebody else's problem, and it is the most useful comparison in this category because it is specific.
Smallpdf deletes uploaded files within the hour, hosts in Switzerland under Swiss data protection with an EU adequacy decision, and holds ISO 27001 certification. Sejda deletes after two hours and is Dutch, so intra-EEA processing. PDF24 processes online in Germany and requires no account at all — nothing to link a document to a person.
Compare that with a policy that says files are deleted "periodically" or retained "as long as necessary", which tells you nothing you can act on.
The strongest position remains no upload: Stirling PDF and the PDF24 desktop app never transmit the file, which makes retention a non-question rather than a short window.
Why is real text editing so rare?
Because PDF was designed as a fixed-layout format rather than an editable one, and reflowing text inside it is genuinely hard.
Most tools calling themselves PDF editors let you add a text box on top, which is fine for filling a form and useless for correcting a typo in a paragraph. Sejda does actual text editing inside existing PDFs — change a word and the paragraph behaves like a paragraph — which is the specific capability most people are looking for when they start pricing Acrobat.
Sejda adds forms, merge and split, OCR, compression, signing and redaction, with a desktop version processing locally and a free tier with daily limits. Web plans start from about $7.50 per month.
Smallpdf and iLovePDF both acknowledge limited in-PDF text editing, and PDF24 is similar. If editing the text is the reason you are here, that narrows the list to one.
What does self-hosting a PDF suite give you?
Everything the web tools do, minus the upload — plus one capability that is hard to find anywhere else.
Stirling PDF covers more than 50 operations including OCR, splitting and merging, conversion, form filling and signing, all on your own server with no telemetry, under an MIT-licensed core. Pipeline automation handles bulk processing, so a folder of documents runs through a defined sequence rather than one file at a time through a browser.
True redaction is the capability worth naming. Drawing a black rectangle over text in most tools leaves the text underneath, recoverable by copy-paste or extraction — a failure that has produced real disclosures of information people believed removed. Stirling PDF removes the content.
The costs are the ones self-hosting always brings: someone has to run and update it, the interface is functional rather than polished, and some features are reserved for the commercial Enterprise tier.
What if you are building software rather than editing documents?
Nutrient, which is a different product for a different buyer and belongs in the same category only because both involve PDFs.
Nutrient, formerly PSPDFKit, provides SDKs for web, iOS, Android and server so software vendors can embed PDF viewing, editing, annotation, forms, digital signatures, redaction, OCR and conversion inside their own applications — the alternative being years of in-house development against a format that is far harder than it looks.
On-premise and containerised deployment mean document processing can run inside a customer's infrastructure, which is what makes it viable for vendors selling into regulated sectors.
Nutrient has operated from Vienna since 2011, giving an EU supply chain for a component that ends up inside the customer's product. Licensing is custom and quoted per platform and deployment, it is proprietary single-vendor dependency, and it is irrelevant unless you are shipping software.
