Skip to content
dialegein

CamScanner

Mobile document scanner with OCR, PDF conversion and cloud sync.

Where your files are processed

Reported to upload your files

The vendor states that files are uploaded to their servers. We have not independently tested this. This covers the web service. We have not checked desktop app processing, and we do not extend the finding to it.

The mobile app captures and enhances scans on the device, but the vendor's privacy policy says uploaded files are collected and processed on its servers for OCR, storage and sync, and the web PDF tools are server-side.

What it does

CamScanner turns phone photos of paper into cleaned-up scans and PDFs, with automatic edge detection, cropping, filters and text recognition. Beyond scanning it offers page management, compression, format conversion, annotation, e-signing, watermarking and password protection, plus a browser-based PDF toolbox. Files can stay on the phone or sync across devices through a CamScanner account.

Best for: Individuals and small teams who want a capable free mobile scanner with OCR and an optional cloud library for syncing across devices.

Worth knowing: Free use is restricted — OCR text export, extra cloud space and several tools are subscription-only — and cloud sync, OCR and conversions send documents to CamScanner's servers rather than keeping them on the device.

Details, and where each comes from

Vendor statements, our own reading of their pages, and the things nobody has established yet, each answered separately. Where we have not confirmed something it says so rather than guessing, and a row nobody has established is greyed out.

Versions covered
Web · Windows · macOS · iOS · Android · API
Website
camscanner.com
Requires an account
Not verified
Free tier
Yes
Watermark on the free tier
Not verified
Maximum file size
Not verified
Batch processing
Yes
Data residency
Multiple regions
Open source
Not verified
Self-hostable
Not verified
Licence
Not verified
Redaction
No redaction feature
Programmatic access
HTTP API · Command line
Last availability check
Responded in 532 ms 16 October 2026

Checked automatically by our own runner, not reported by the vendor. 100% of our last 30 checks got a response.

What the redaction verdict rests on

From the vendor's own documentation, read 22 September 2026. Not tested by us.

What that does not establish: The vendor’s own site was read on 22 September 2026 and contains no mention of redaction, sanitisation, blackout or whiteout. Absence from a vendor’s own material is not proof that a feature does not exist — it may be undocumented, or on a page the reading did not reach — but for a NEGATIVE claim it is the strongest evidence available, and it is weaker than a positive quote. Recorded as such rather than presented as certainty.

https://www.camscanner.com/

What the vendor says

Claims are labelled rather than repeated as fact. Where we have checked something ourselves, it says so and shows when. Checked means we read the vendor's own page and it says what we recorded — not that we tested the behaviour, unless the note says we did.

  • “A popular choice for users worldwide, trusted by 300 million users”

    Checked by us — the source says this Read 22 September 2026

    Confirmed verbatim: the page states "A popular choice for users worldwide, trusted by 300 million users". No source, date or definition accompanies the figure and none was sought. This is the largest social-proof number in the index, above Docusign's 1.9 million customers and Adobe's 5 million companies, and CamScanner is a consumer mobile app, which is the kind of product where a figure in the hundreds of millions is at least arithmetically possible — unlike Smallpdf's 1.7 billion, recorded in the same batch. Recorded as the vendor's assertion, and the honest position is that we could not establish it.

    Standing: Re-read and matched byte for byte

    Check it yourself: the source, the SHA-256, and how we checked
    From
    the text a browser renders
    SHA-256
    0f0489842ff43b86d690beb936c734782428823166f1ce390b9d5dd4bff36286

    How we checked: Re-verified verbatim on 2026-09-22: https://www.camscanner.com/ re-rendered in headless Chrome with scripts/render-page.mjs and the claim's wording found in the rendered text. Originally verified on 2026-09-21. sourceHash is the SHA-256 of the re-rendered text, held as rv-www-camscanner-com-34f75bc9.txt.

    What this hash proves, and what it does not

  • “At present, CamScanner has achieved many global certifications, and continues to provide users with safe and reliable products and services.”

    Checked by us — the source says this Read 22 September 2026

    Confirmed verbatim: the sentence appears unaltered in a paragraph about the company's security governance, and the claim is exactly the part of it that asserts certifications. What the page then does is more useful than the sentence: it names three standards individually — ISO/IEC 27001 for information security management, ISO/IEC 27701 for privacy information management, and ISO/IEC 20000 for IT service management — each with a sentence explaining what it signifies. So "many global certifications" resolves to three named ISO standards, and a reader can weigh them. The limit is that the page names no certification body, no certificate number and no audit date, so none of the three can be checked from this page; ISO does not operate a public register of certified organisations, which means these claims cannot be settled by lookup in the way a SOC 2 report can be requested. Recorded as the vendor's assertion; nothing here was independently verified.

    Standing: Re-read and matched byte for byte

    Check it yourself: the source, the SHA-256, and how we checked
    From
    the text a browser renders
    SHA-256
    1eeceff8384e24d062afafb5b10439d6bd5efdcf142849c66c8db10fce209ecb

    How we checked: Re-verified verbatim on 2026-09-22: https://www.camscanner.com/security-compliance re-rendered in headless Chrome with scripts/render-page.mjs and the claim's wording found in the rendered text. Originally verified on 2026-09-21. sourceHash is the SHA-256 of the re-rendered text, held as rv-www-camscanner-com-security-compliance-96e10086.txt.

    What this hash proves, and what it does not

Each claim is quoted from the vendor's own pages. This section describes what we have and have not checked — it is not a judgement about anyone.

Sponsorship is distribution, not an endorsement or a promise of search rankings, AI citations, traffic, or sales. This listing is a free entry, compiled from published sources.

Visit CamScanner Report a problem

How this record was put together

Editorial review.
No editor has signed this record off. That is not the same as nothing having been checked, and the lines below say what has.
Source reading.
2 claims taken from the vendor's own pages, read between 22 September 2026 and 22 September 2026.
Website availability.
The vendor's site was last checked on 16 October 2026.
Behaviour testing.
We have not run this tool ourselves, so everything here rests on the vendors’ own pages.

Sources: camscanner.com (home, download, security-compliance, agent-docs: the Agent document capabilities page and the MCP connection page, dev.camscanner.com partner API page); CamScanner privacy policy; UK App Store listing. Vendor claims, not independently verified.