# PDF.js Express Viewer document secure - HIPAA

**URL:** https://pdfjs.community/t/pdf-js-express-viewer-document-secure-hipaa/1643
**Category:** Technical Support
**Created:** [April 28, 2022, 11:48pm UTC](https://pdfjs.community/t/pdf-js-express-viewer-document-secure-hipaa/1643 "2022-04-28T23:48:54Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![developer1](https://avatars.discourse-cdn.com/v4/letter/d/bcef8e/32.png) [@developer1](https://pdfjs.community/u/developer1)
#### Post date: [April 28, 2022, 11:48pm UTC](https://pdfjs.community/t/pdf-js-express-viewer-document-secure-hipaa/1643/1 "2022-04-28T23:48:54Z")

</div>

Hi, We are evaluating PDF.js Express Viewer to show inline pdfs in our product. But we deal with medical domain where the PDF content is HIPAA sensitive. We would like to confirm that the PDF.js Express Viewer only keep the data(pdf file) in browser and no way it send the pdf document in any server. If it send it to any server then we will require a Business Associate Agreement. Can anyone please answer this, we want to make sure we will be covered while using this awesome platform.

**Which product are you using?**  
PDF.js Express Viewer

---

<div class="post-metadata">

### Author: ![system](https://canada1.discourse-cdn.com/flex031/uploads/pdfjscommunity/original/1X/ffbcd25c7d423db8d5acd5db201c272f4db306dd.png) [@system](https://pdfjs.community/u/system)
#### Post date: [April 28, 2022, 11:48pm UTC](https://pdfjs.community/t/pdf-js-express-viewer-document-secure-hipaa/1643/3 "2022-04-28T23:48:59Z")

</div>

**Hello, I’m Ron, an automated tech support bot 🤖**

While you wait for one of our customer support representatives to get back to you, please check out some of these documentation pages:

Guides:
- [PDF.js Express Viewer Overview - What is PDF.js Express Viewer?](https://pdfjs.express/documentation/get-started-viewer#what-is-pdf.js-express-viewer?)
- [Browser support for PDF.js Express](https://pdfjs.express/documentation/learn-more/browser-support)
- [PDF.js Express Viewer](https://pdfjs.express/documentation/viewer/overview)

APIs:
- [PDF.js Express Utilities](https://pdfjs.express/api/utils/index.html#__anchor)
- [Core.Annotations.Link - new Link(options)](https://pdfjs.express/api/Core.Annotations.Link.html#Link__anchor)
- [Core.Document - cropPages(pageArray, topMargin, botMargin, leftMargin, rightMargin)](https://pdfjs.express/api/Core.Document.html#cropPages__anchor)

Forums:
- [Access to PDF.js viewer when your servers are unavailable](https://pdfjs.community/t/access-to-pdf-js-viewer-when-your-servers-are-unavailable/1260/1)
- [PDF.JS Express not working in domain](https://pdfjs.community/t/pdf-js-express-not-working-in-domain/1327/1)
- [What version of PDF.js Express we should use](https://pdfjs.community/t/what-version-of-pdf-js-express-we-should-use/1542/1)

---

<div class="post-metadata">

### Author: ![Logan](https://yyz1.discourse-cdn.com/flex031/user_avatar/pdfjs.community/logan/32/13_2.png) [@Logan](https://pdfjs.community/u/Logan)
#### Post date: [April 29, 2022, 3:08pm UTC](https://pdfjs.community/t/pdf-js-express-viewer-document-secure-hipaa/1643/4 "2022-04-29T15:08:25Z")

</div>

Hey there!

PDF.js Express does not send any document data to the servers - it only sends license key data and anonymous telemetry data.

Thanks,  
Logan

---

<div class="post-metadata">

### Author: ![developer1](https://avatars.discourse-cdn.com/v4/letter/d/bcef8e/32.png) [@developer1](https://pdfjs.community/u/developer1)
#### Post date: [April 29, 2022, 3:25pm UTC](https://pdfjs.community/t/pdf-js-express-viewer-document-secure-hipaa/1643/5 "2022-04-29T15:25:34Z")

</div>

Thank you for the quick response Logan ! Another quick question, if we use other features like annotation does PDF.js provide a BAA (Business Associate Agreement) ? Let me know please.

---

<div class="post-metadata">

### Author: ![Logan](https://yyz1.discourse-cdn.com/flex031/user_avatar/pdfjs.community/logan/32/13_2.png) [@Logan](https://pdfjs.community/u/Logan)
#### Post date: [May 3, 2022, 2:23pm UTC](https://pdfjs.community/t/pdf-js-express-viewer-document-secure-hipaa/1643/6 "2022-05-03T14:23:44Z")

</div>

Hi there,

We do not provide BAA’s - sorry about that.

Thanks!  
Logan
