Embedded designer
Embedded designer architecture and security
Plan tenant ownership, schema exposure, permissions, saving, publishing, and server-side rendering.
Reviewed 2026-08-05 · PDFDesignAPI Engineering
Host application responsibilities
The host application authenticates the user, resolves tenant membership, determines permissions, and exposes only the approved document schema.
API tokens and generation calls stay in trusted server code.
Template lifecycle
Treat editor saves as development work. Apply the host product approval model before moving an immutable version to staging or production.
Record tenant ownership and template identifiers in the host application.
Implementation checklist
Confirm required components, tenant isolation, branding controls, events, save behavior, accessibility, and support boundaries before rollout.
Use the embedded SDK quickstart for the supported base/external UUID workflow and create every editor session from trusted backend code.