For lawyers & legal teams

The document never leaves your office.

Sign, redact, Bates-stamp, and fill client and court PDFs without the file ever being uploaded. AttachKit runs entirely in your browser — so privileged material is never copied to a server you don't control. And unlike a promise in a privacy policy, you can prove it.

Why "in your browser" matters for privilege

Most online PDF tools upload your file to their servers to process it. For a marketing one-pager that's fine. For a privileged memo, a client's tax return, a settlement draft, or a sealed exhibit, it means a copy of confidential material now lives on infrastructure you don't control — subject to their retention, their breaches, and potentially their subpoenas.

AttachKit doesn't upload the file at all. The PDF is parsed, edited, signed, redacted, and stamped inside the browser tab you have open. The server never receives it — and most of the time isn't contacted at all. The confidentiality posture is the same as working on the file in a desktop app: nothing transmitted, no server-side copy to retain.

Don't take our word for it — check the network tab

This is the part you can verify in thirty seconds, today, before you trust us with anything:

• Open any tool (try Redact).
• Open your browser's developer tools and switch to the Network tab.
• Drop in a PDF and run the tool.
• Watch the request list. Your file is never sent. The full technical account of what does and doesn't touch our server is on the security page.

The tools you actually reach for

Sign & get a verifiable proof

Sign or counter-sign in your browser. Every signed PDF carries a content-bound proof: change a single byte of the document afterward and verification fails. Anyone — opposing counsel, a court clerk, a client — can confirm a signature at attachkit.com/verify, and the check also runs offline. PAdES-aligned (not a QES — see the FAQ on legal validity below).

Redact so it stays redacted

Draw redactions, or let on-device detection flag likely PII, then export with forensic scrub so the text and images underneath are removed from the file — not just hidden behind a black box that can be lifted out. Re-open and search the export to confirm before you produce it.

Bates numbering for discovery

Stamp a Bates prefix plus a sequential number across an entire document set for discovery and exhibits — all in the browser, nothing uploaded. See Bates numbering.

Fill government & client forms

Fill IRS, USCIS, and state forms with verified field maps, or let the optional AI suggest values from extracted field text (never the file). Browse the form library.

Where we're honest about the limits

A tool you'd stake a matter on should tell you what it isn't:

• Not a Qualified Electronic Signature (QES) under eIDAS, and not on the Adobe Approved Trust List. For matters that specifically require a qualified or AATL-trusted certificate, use a QES provider.
• Not legal advice, and not a law firm. Using AttachKit creates no attorney-client relationship. You remain responsible for what you sign, redact, and produce.
• Optional AI sends field text, never the file. The auto-fill feature is opt-in and clearly labeled; it transmits only extracted form-field text to the AI provider. Skip it and nothing leaves your browser at all.

Frequently asked

Do my client files get uploaded to a server?

No. AttachKit parses, signs, redacts and stamps the PDF inside your browser tab — the bytes never go to our server. You can prove it yourself: open your browser's developer tools, switch to the Network tab, and run any tool. You'll see no upload of the file. Most tools don't contact the server at all.

Is this confidential enough for privileged or sensitive documents?

Because the document never leaves your machine, there's no server-side copy of it to subpoena, breach, or retain — the confidentiality posture is the same as editing the file in a desktop app, with nothing transmitted. The one exception is the optional AI auto-fill, which sends only the extracted form-field text (never the file) to the AI provider; it's opt-in and clearly labeled, and you can ignore it entirely.

Are the signatures legally valid?

AttachKit produces PAdES-aligned signatures suitable for ordinary business and client documents, plus a content-bound proof anyone can verify at attachkit.com/verify. It is NOT a Qualified Electronic Signature (QES) under eIDAS and is not part of the Adobe Approved Trust List (AATL) — if your matter specifically requires a qualified or AATL-trusted certificate, use a QES provider. We say this plainly so you can match the tool to the requirement.

Does the redaction actually remove the text, or just cover it?

With forensic scrub enabled, the underlying text and image content under each mark is removed from the saved file — not merely hidden behind a black rectangle that can be copied out or deleted. Always re-open and search the exported PDF to confirm before producing it.

Can I Bates-number a discovery set?

Yes — add a Bates prefix plus a running sequence across a document set, stamped in your browser. It's part of AttachKit Pro. See the Bates numbering tool.

Is AttachKit a law firm, or is this legal advice?

No. AttachKit is software for working with PDFs. Nothing here is legal advice, and using the tool does not create an attorney-client relationship. You remain responsible for what you sign, redact, and produce.