HIPAA Compliance Statement

Traditional cloud-based PDF processors require you to upload patient records to their servers, forcing you to execute complex Business Associate Agreements (BAAs) and trust their backend security. Utilitly.com operates differently.

Local Execution via WebAssembly

Our core PDF utilities (including Merge, Split, Protect, and Annotate) execute completely within your web browser's local sandbox using WebAssembly. This means that when you process a medical record or patient invoice, the document never leaves your computer. It is not uploaded to our servers, not transmitted over the network, and not stored in any external database.

Because the PHI never enters our infrastructure, Utilitly.com acts merely as a local software tool, drastically reducing your compliance burden and eliminating the risk of a third-party data breach.

For complex format conversions (such as converting a PDF medical record into an editable Word document), the file must briefly interact with our secure conversion servers. In these instances:

• Data is transmitted using strict TLS 1.3 encryption.
• Files are processed exclusively in volatile memory (RAM).
• The payload is immediately and permanently destroyed the moment the converted file is downloaded.
• We do not store, log, or backup any PHI.

We advise strict compliance organizations to utilize our local WebAssembly tools for PHI, and use server-side conversions only for anonymized or non-sensitive administrative documents.