For HR & recruiting

Candidate data never leaves your laptop.

Redact resumes and applications, fill onboarding forms, and sign offer letters without the file ever being uploaded. AttachKit runs entirely in your browser — so a candidate's SSN or an employee's tax details are never copied to a server you don't control. And unlike a promise in a privacy policy, you can prove it.

New: tell the document what to do

The Private PDF Agent (in beta) lets you describe a change in plain English — “redact every SSN”, “keep only the signed pages” — and review a clear plan before anything is applied. The data posture is unchanged: the file never leaves your browser; only the extracted text is sent to the AI so it can locate things, never the document itself. Nothing changes until you approve the plan, and your original is never modified.

Why "in your browser" matters for candidate & employee data

Most online PDF tools upload your file to their servers to process it. For a job posting that's fine. For a resume, an I-9 with a passport scan, a signed offer with compensation, or a background-check result, it means a copy of personal data now lives on infrastructure you don't control — subject to their retention, their breaches, and their sub-processors.

AttachKit doesn't upload the file at all. The PDF is parsed, redacted, filled, and signed inside the browser tab you have open. The server never receives it — and most of the time isn't contacted at all. The data-handling posture is the same as working on the file in a desktop app: nothing transmitted, no server-side copy to retain.

Don't take our word for it — check the network tab

This is the part you can verify in thirty seconds, today, before you trust us with anything:

• Open any tool (try Redact).
• Open your browser's developer tools and switch to the Network tab.
• Drop in a PDF and run the tool.
• Watch the request list. Your file is never sent. The full technical account of what does and doesn't touch our server is on the security page.

The tools you actually reach for

Redact so it stays redacted

Draw redactions yourself, or let optional AI suggest likely PII — it sends only the extracted text (never the file), and Local AI mode keeps even that on your device. Then export with forensic scrub so the text and images underneath are removed from the file — not just hidden behind a black box a downstream reviewer could lift out. Re-open and search the export to confirm before you forward it. Start with Redact.

Fill onboarding & government forms

Fill the I-9, W-4, and state employment forms with verified field maps, or let the optional AI suggest values from the form's field names and your saved details (never the file). Browse the form library.

Sign offers & get a verifiable proof

Sign or counter-sign offer letters and acknowledgements in your browser. Every signed PDF carries a content-bound proof: change a single byte afterward and verification fails. The new hire — or an auditor — can confirm a signature at attachkit.com/verify, and the check also runs offline. PAdES-aligned (not a QES — see the FAQ below).

Where we're honest about the limits

A tool you'd put an employee's data through should tell you what it isn't:

• Not a Qualified Electronic Signature (QES) under eIDAS, and not on the Adobe Approved Trust List. For documents that specifically require a qualified certificate, use a QES provider.
• Not legal, HR, or compliance advice. AttachKit is software for working with PDFs. You remain the controller of the personal data you handle and responsible for your own obligations.
• Optional AI sends field text, never the file. Auto-fill and PII suggestions are opt-in and clearly labeled; skip them and nothing leaves your browser at all.

Frequently asked

Do resumes and employee files get uploaded to a server?

No. AttachKit parses, redacts, fills and signs the PDF inside your browser tab — the bytes never go to our server. You can prove it: open your browser's developer tools, switch to the Network tab, and run any tool. You'll see no upload of the file. The only exceptions are the optional AI features — form auto-fill (which sends the form's field names and your saved profile details) and Redact's “suggest likely PII” (which sends extracted text) — never the file, and Local AI mode keeps even that on your own device.

Can I redact SSNs and personal details from applications and resumes?

Yes. Draw redactions yourself, or let optional AI suggest likely PII (it sends only extracted text, never the file). Export with forensic scrub so the underlying text and images are removed from the saved file — not just hidden behind a black box a recruiter downstream could lift out. Always re-open and search the export to confirm before you forward it.

Which onboarding forms can I fill?

AttachKit's form library includes common US employment forms such as the I-9 (Employment Eligibility Verification) and W-4 (Employee's Withholding), plus many state and government forms, with verified field maps. You can also let the optional AI suggest values from the form's field names and your saved details. Browse the form library to see what's covered.

Are signed offer letters legally valid?

AttachKit produces PAdES-aligned signatures suitable for ordinary business documents like offer letters and policy acknowledgements, plus a content-bound proof anyone can verify at attachkit.com/verify. It is not a Qualified Electronic Signature (QES) under eIDAS and is not on the Adobe Approved Trust List (AATL) — if a specific document requires a qualified certificate, use a QES provider.

Is this a safe way to handle candidate PII under GDPR / CCPA?

Because the document never leaves your machine, there is no server-side copy of candidate or employee data for us to retain, breach, or process — the data-handling posture is the same as editing the file in a desktop app. That removes a whole category of processor risk, but AttachKit is software, not legal or compliance advice: you remain the controller of that data and responsible for your own obligations.

Can the AI agent tidy up a batch of documents without uploading them?

Yes. The Private PDF Agent (in beta) edits the PDF inside your browser — the file is never uploaded. You describe a change in plain English and only the extracted page text is sent to the AI so it can locate things; the document itself never leaves your device. The agent only proposes a plan you review and approve — it never changes the file on its own, and your original is untouched.