NextPDF License Activation Service

The NextPDF License Activation Service is the cloud service that issues, activates, and manages commercial licences for the NextPDF Pro and Enterprise PDF engines. It provides licence issuance and delivery, device activation with renewable 14-day leases, online licence-status verification, revocation propagation, a customer self-service portal, and public signing-key distribution (JWKS) so that customers verify cryptographically signed licences offline against a pinned root of trust. The service runs entirely on a serverless edge architecture (Cloudflare Workers with D1 storage); there is no PATEON-operated datacenter in scope. Licences are signed with a two-tier PKI whose root key is held in a hardware security module with a named custodian; leaf signing keys are isolated in a dedicated signer service. Security controls include per-route authorization, schema-validated inputs, rate limiting, TLS-only transport, tamper-evident audit logging, continuous SBOM vulnerability monitoring, and streaming log retention with defined retention classes. Data handling is minimized to licensing records, with documented GDPR processes (data inventory, DSAR procedure, sub-processor register). Service availability is publicly observable at https://status.getnextpdf.com. The service is operated under PATEON's ISO/IEC 27001:2022-certified ISMS governance; formal extension of the certificate scope to this service is planned for the next surveillance audit. The NextPDF software libraries themse