Is CraftMyPDF safe? The company, its security statements and its refund terms

Is CraftMyPDF safe to use? The short answer and the evidence

CraftMyPDF is a real service whose own pages name its operator, Alphacloud Technologies Pte Ltd of Singapore, and state how it hosts data, stores files and takes payments. It says it completed a SOC 2 Type II audit. The Free plan costs $0 and asks for no credit card; the entry paid plan, Lite, is $29 a month, billed monthly, as read on October 10, 2026.

Every row below is a statement from CraftMyPDF's own pages. We saw neither the audit report, nor a company registry entry, nor any third-party rating, so none is quoted.

Who runs CraftMyPDF

CraftMyPDF's Privacy Policy names Alphacloud Technologies Pte Ltd, a limited company organized under the laws of Singapore, and its Terms of Use are construed under Singapore law. The About page describes a team based in Singapore that built the product in June 2021, and calls APITemplate.io its sister product. What is CraftMyPDF explains the product itself.

Where CraftMyPDF stores your data and generated PDFs

CraftMyPDF says its data and applications are hosted by Amazon Web Services. Its default API endpoint is in Singapore. The API reference also lists endpoints in Frankfurt, US East (N. Virginia) and Sydney, and says request data and generated PDFs are processed and stored within the endpoint's region. CraftMyPDF does not say which plans may use the regional endpoints.

The security page says generated files are stored on AWS S3 with encryption at rest. A stored link lasts 5 minutes by default, set by the expiration setting, and 7 days at most. The file output option instead returns the PDF itself, which the API reference calls more secure and completely private. The security page also says API call logs are kept up to 14 days and can be turned off.

A Data Processing Agreement (DPA) is a signed contract on how CraftMyPDF handles data for you. It is available from Lite by request, not on Free. The CraftMyPDF review lists the plan limits.

CraftMyPDF uptime, refunds and HIPAA: what it does not state

CraftMyPDF's public service-level agreement (SLA) says it will use commercially reasonable efforts to keep the service available 99.9% of the time, and it pays service credits only, with no refunds or cash value. The pricing page offers a signed SLA only above the Business plan.

You can cancel yourself from the Manage Billing button on the Subscription page. Canceling does not refund fees already charged, and individual refund requests are considered case by case. Prices and plans are on CraftMyPDF pricing.

CraftMyPDF's security page, DPA, Terms and pricing page do not mention HIPAA. DocRaptor says it is both SOC2 and HIPAA compliant and has a 99.99% uptime guarantee, so pick DocRaptor if you need a vendor HIPAA statement. This page reports what vendors state; it does not judge whether your own use is compliant.

The Free plan asks for no credit card, so nothing is paid while you check these points against your own documents.