The full pipeline is local
Not just rendering. Not just signing. The original PDF, the signed PDF, and the link metadata all stay in your browser. The signed file is generated locally with pdf-lib and downloaded to your device. Open DevTools → Network and use the app — you'll see zero outbound requests with file data, end to end.