Edit PDF metadata without uploading the document

The author field is the one that catches people. It is commonly filled with whatever account name was signed in to the machine that made the file, so a CV, a tender or an anonymous complaint can arrive carrying a real name that the sender never typed. Producer names the software that wrote the file, and sometimes its version, which is a small but real piece of intelligence about your setup.

Title is the sleeper. A PDF exported from a word processor often inherits its title from the first heading or from the original file name, and original file names are candid in a way finished documents are not: a client name, a candidate's surname, a salary band, the word final followed by a version number. Some producers write the source document's name, and occasionally where it lived on disk, straight into these fields.

Creation date is the third. It fixes when the file was made, which is fine until it quietly contradicts something you said about when the work was done. Before a document leaves your organisation, open its properties, decide what each field should say, and set it deliberately rather than letting an export decide for you.

Verify the edit itself stayed local by watching the network panel while you change a field and save, or by disconnecting the network first. Then verify the edit worked by reopening the saved file and reading the properties back, which is the check people forget: an edit you did not confirm is a habit, not a control.