Security for IT reviewers

Your documents stay on your computer

The PubKeep desktop app (Windows and Mac) and PubKeep online (app.pubkeep.com) open, edit, and save documents on your own computer. We never receive them. Only two things send a document to us, and both ask first:

• Report an issue. A person reporting a problem can check “Include this file” to send us the document so we can reproduce it. The box is unchecked by default. The file is stored privately and deleted after 30 days.
• Upgrading a Publisher 97 or 98 file in the desktop app. PubKeep asks before it sends the file. Our server converts it to the modern format, sends it back, and deletes it when the upgrade is done. The original on the computer is not changed.

The desktop app doesn't use PostHog or any other analytics service. PubKeep online counts visits and clicks with PostHog. It does not record sessions.

PubKeep Converter works differently

PubKeep Converter (convert.pubkeep.com) turns .pub files into PDFs on our servers. Files you upload and the PDFs we make are kept in your account so you can download them again, until you delete them from your batches list or ask us to.

What we store

• The license holder’s name and email address.
• For each computer that activates a license: the computer name, a device identifier, the operating system, the PubKeep version, and the IP address. On a shared Windows server, where each user has their own license seat, we also collect the Windows user name.
• Update reports from the desktop app: the version, the operating system, and whether the update installed.

Sign-in uses a one-time code or link sent by email, so there are no passwords to store.

Where it runs

PubKeep runs in the United States, on established cloud providers and on servers we manage, for hosting, the database, file storage, email delivery, and analytics. Payments go through Lemon Squeezy and Stripe, so card details go to them, not to us. Our full list of service providers is available on request for school, IT, and procurement reviews.

If someone uses Online Pictures, their search words go to the picture search services. IT teams that need a network allowlist can email us for the addresses the app uses.

In transit and at rest

Every connection to PubKeep uses HTTPS. Our database and file storage are encrypted at rest.

Signed installers

The Windows installer and app are code-signed through Azure Trusted Signing, with the publisher shown as Saint Systems, LLC. The Mac app is signed with an Apple Developer ID and notarized by Apple.

Deploying PubKeep across your organization

PubKeep supports silent installs, pre-licensing, and deployment with Group Policy or Intune, including on Remote Desktop and other shared Windows servers.

Email us for the deployment steps, including how IT can control updates.

Questions and security reports

Send security questions, review questionnaires, or a suspected vulnerability to hello@pubkeep.com.