How to keep a PDF private on Mac
For anyone under a professional duty of confidence: what stays on your Mac in Verso, and what to do before a document leaves it.
Lawyers, clinicians, accountants, HR, journalists, social workers — a lot of people handle documents they are professionally or legally obliged to keep confidential. For them, the question “where does this document go when I process it?” is not a preference.
The architectural answer
Verso contains no code that talks to the internet. Not for text recognition, not for conversion, not for compression, not for the assistant, not for analytics, not for anything. There is no account, no sign-in and no server of ours that a document can reach.
That is a claim you can check rather than trust: turn off your Wi-Fi and use the app normally. Everything works, because nothing was going anywhere.
Purchases go through Apple's App Store, which is Apple's transaction and governed by Apple's terms. It never sees your documents. That is the entire network story.
What this rules out that other tools do not
| Task | Commonly done by | Here |
|---|---|---|
| Recognising text in a scan | Uploading to a recognition service | On your Mac |
| Converting to Word or Excel | Uploading to a conversion service | On your Mac |
| Compressing a file for email | Uploading to a compression service | On your Mac |
| Merging several documents | Uploading all of them to a website | On your Mac |
| Signing a contract | Sending it to a signing platform, which stores it | On your Mac |
| Summarising a document | Sending its contents to a model over the network | On your Mac, using Apple's on-device intelligence |
Before a document leaves your hands
Local processing protects a document while you work on it. What happens next is up to you, and these are the four steps that matter:
- Redact what the recipient must not see — and verify it by searching the result.
- Sanitize to clear the title, author, keywords and internal comments the document carries invisibly.
- Flatten if marks or a signature must not be movable.
- Encrypt with a password, sent by a different route.
Protecting the machine, not just the document
An app can only do so much. The document sits on your Mac, and the Mac is the rest of the story:
- Turn on FileVault. An unencrypted disk means an unencrypted document to anyone who has the machine.
- Use a real login password and a short lock screen delay.
- Think about where the file lives. A confidential document in a synced cloud folder is on somebody else's servers regardless of which app opened it.
- Be careful with backups. Time Machine backs up what you tell it to, to wherever you point it.
- Watch the temporary copies you make. The unredacted original you kept “just in case” is a real document in a real folder.
Why an account would change the answer
An app with an account has a record of who you are, and usually a record of what you opened. Verso has neither, because there is nothing to attach them to: no sign-in, no profile, no usage history, no crash reporting service. The app does not know who you are and has no way to find out.
For most people that is a nice property. For anyone whose document list would itself be sensitive — which client, which patient, which matter — it is the difference between a tool they can use and one they cannot.
Frequently asked questions
Is it safe to edit confidential PDFs on a Mac?
It depends entirely on where the work happens. Verso does all of it on your machine and contains no code that talks to the internet, so the document never leaves the Mac.
How can I verify that nothing is uploaded?
Turn off your Wi-Fi and use the app. Every feature still works — including text recognition, conversion and compression, which other tools send to a server.
Does Verso have an account or sign-in?
No. There is nothing to create, nothing to log into, and no profile holding a record of what you have opened.
What should I do before sending a confidential document?
Redact what must not be seen and verify it, sanitize to clear the document's own details and comments, flatten if marks must not move, and encrypt with a password sent separately.
Is a password enough to keep a document private?
It protects it in transit. It does not control what the recipient does afterwards, and it does nothing about content they should not have been sent in the first place. Redaction is what handles that.
Does the assistant send my document anywhere?
No. It runs on your Mac using Apple's on-device intelligence, which is why it needs a Mac where that is available.