What are PDF annotations? Types and examples
Learn what PDF annotations are, from highlights and comments to stamps and form fields. See how they work, how to add them, and what printing annotations means.
Secure document SDK for SOC 2 and GDPR compliance
Add robust document protection to your app — from digital signatures and redaction, to permission controls, watermarks, and audit logging. Meet compliance, privacy, and trust requirements without sacrificing usability.
What do you want to do with documents?
Protect sensitive data
Remove confidential information permanently with reliable redaction tools.
Control document access
Restrict printing, copying, editing, and more with user-level permissions.
Verify authenticity
Add digital signatures with support for validation, certification, and trusted integrations.
Track and log activity
Enable audit trails to log redactions, changes, and signatures for compliance.
How we help
DOCUMENT ACCESS
Manage how your documents are viewed, used, and modified
Define what users can see and do inside a document. Apply role-based controls and configure behavior like printing, copying, and editing with precision.
Permissions control
Restrict editing, printing, copying, and more with fine-grained PDF permissions.
Secure PDF viewing
Render documents securely in the browser with HTML-based, WCAG-compliant viewing.
Editing controls
Assign or update passwords and permission flags programmatically.
Watermarking and annotations
Add user-specific watermarks and control annotation visibility using access flags.
SECURITY TOOLS
Build security and trust into every document
Apply irreversible redaction, cryptographic signatures, and audit logging to meet privacy laws and maintain long-term data integrity.
Redaction
Permanently remove content and metadata to meet privacy requirements.
Digital signatures
Add and validate signatures with support for certificates, HSM, and long-term validation.
Audit trails
Log redactions, permissions changes, and signature events for compliance tracking.
PDF/A export and validation
Convert documents to archival formats for long-term storage, and validate existing PDFs against the PDF/A conformance level they claim.
Supported on your platform
Lufthansa
Disney
Autodesk
Harvey
Dropbox
IBM
Lufthansa
Disney
Autodesk
Harvey
Dropbox
IBM
Related components
Trust, transparency, and compliance — built in
Security isn’t just a feature — it’s a foundation. Nutrient maintains a SOC 2-compliant infrastructure, follows secure development lifecycle practices, and undergoes regular third-party audits. From encryption to access controls, we build our platform to meet the highest standards of confidentiality, integrity, and availability.
Frequently asked questions
What is compliance management automation and why is it important?
Compliance management automation streamlines how organizations meet regulatory obligations. By automating redaction, audit logging, signature tracking, and permission controls, it reduces risk, saves time, and helps teams stay compliant with standards like GDPR, HIPAA, and SOC 2.
What PDF security features does Nutrient offer?
Nutrient includes password protection, permission settings, irreversible redaction, digital signatures (including long-term validation), watermarking, audit trails, and PDF/A export — everything needed to secure documents and support regulatory compliance.
How does Nutrient help with document security and compliance?
Nutrient protects documents from unauthorized access, tampering, or data loss. Its features — including encryption, redaction, eSignatures, PDF/A export, and audit trails — are built to meet industry-specific standards across finance, healthcare, and legal workflows.
Is Nutrient's security toolkit suitable for all industries?
Yes. Nutrient supports compliance and security needs across regulated industries like healthcare, government and public records, education, legal, and finance. It adapts to both internal policies and external regulatory requirements.
How do I get started with Nutrient's PDF security features?
You can start with a free trial or interactive demo. Nutrient provides developer-friendly documentation, SDKs, and customer support to help you integrate and scale quickly.
Can I integrate these features into my own applications?
Yes. Nutrient provides SDKs and APIs for web, mobile, and desktop platforms, so you can add features like redaction, digital signatures, and secure viewing to any app or workflow.
Which PDF SDK features support security and compliance for sensitive documents?
Nutrient combines irreversible redaction, digital signatures with long-term validation, permission controls, watermarking, audit trails, and PDF/A export. Together, these help you handle sensitive documents in line with standards like SOC 2, GDPR, and HIPAA.
Is the SDK itself certified for SOC 2, GDPR, or HIPAA?
Nutrient operates a SOC 2-compliant infrastructure and undergoes regular third-party audits — see our security and trust approach. The SDK gives you the technical controls (encryption, redaction, signatures, audit logging) to build applications that meet GDPR, HIPAA, and SOC 2 requirements; compliance of your own application depends on how you deploy and configure it.
What are the licensing and trust considerations for a commercial PDF viewer?
Nutrient is a commercially licensed SDK with dedicated support, a documented security program, and a permission-aware, WCAG-compliant viewer. Unlike open source viewers, you get maintained security updates and an auditable vendor relationship — important when handling regulated or confidential documents.
Insights from our team
PROVEN AT SCALE
Trusted by the brands that move the world
Replaced paper and email with Nutrient Workflow to automate multilevel approvals across six Latin American offices, processing 236 asset requests.
Renders multipage PDFs and signature tags with Nutrient, keeping 200 million users in 188 countries moving at the speed of eSignature.
Scales legal document workflows by 50 percent month over month using Nutrient Web SDK and Document Engine — without adding infrastructure or compromising enterprise compliance.
FOR DEVELOPERS