PDF & Document
Redaction for SAR Responses
Find and permanently remove sensitive information from PDFs, scanned documents and images - all processed on your device.
Start Redacting FreeFully featured Pro trial on your first document. Packs from $25.
Subject access requests · FOI & EIR · Legal disclosure · HR investigations · Medical records · Court bundles
Two redactions. Only one of them is real.
Same three steps on each. Start on the left.
Overlay tool
Payment to IBAN: GB82 WEST 1234 5678
Due within 30 days
- 1Select the barwaiting
- 2Copy itwaiting
- 3Paste anywherewaiting
A shape drawn on top of the page. The text beneath it is untouched and trivial to recover.
You just copied an account number out of a "redacted" file.
RedactProof
Payment to IBAN:
Due within 30 days
- 1Select the barnothing to select
- 2Copy itnothing to copy
- 3Paste anywherenothing there
The page is re-rendered without those pixels and the text layer is remapped without the redacted items.
RedactProof removes the text rather than just hiding it.
Already have a redacted PDF? Inspect it with Redaction Checker, free →
How RedactProof works
Explore each step
How many of these sound familiar?
Three problems RedactProof was built to fix.
Data residency
“Our files are too sensitive to upload to a cloud tool.”
Everything stays on your device by default. The file, its text layer, its contents. Nothing is uploaded, so there is nothing for cloud-processing or data residency rules to attach to. The one exception is opt-in, labelled, and admins can disable it.
Evidence on file
“If this gets audited in future, what do we show them?”
Every export stays defensible with the Pro plan. A tamper-evident certificate, a redaction log with exemption codes, and the account's audit history behind it. If anyone questions a redaction later, the answer is already in the file.
Racing the deadline
“SARs keep landing and we're starting to panic.”
You have one month to respond. Detection lists every finding across the bundle, search catches the rest, your redact and exclude lists apply themselves, and bulk mode runs one setup over a whole batch. A 200-page bundle is a working session, not a week.
Four promises you’ll meet when comparing tools
The same encryption as any website
“Military-grade” is AES-256 - the same encryption as every login page. The claim quietly tells you your document travels: encrypted to their servers, decrypted on arrival - and now it's a data residency issue.
Nothing to encrypt in transit
By default your document never travels, so transit encryption has nothing to protect. What matters is the redaction itself: pixel-burn destroys the content in the file, and the certificate makes any later change detectable.
Encryption protects data on the move and at rest. Read the claim again: if your document needs encrypting in transit, it's because it travels.
Is the extracted text uploaded?
The file itself stays put - but the text layer, the sensitive part, goes to a third-party server for processing. Personal data has travelled, and data residency obligations follow it, whether or not a "file" was uploaded.
On-device, text layer included
Your file, its text layer, the detection and the export: all of it stays on your device. This is the default architecture on every plan. Precision Engine is the opt-in exception on Pro plans, and admins can disable it at policy level.
Check what actually travels. "No file uploads" can be true while the extracted text - every name, number and address in the document - is sent to the cloud for detection.
So who caught the misses?
Detection is good at finding candidates. But every detector has false positives and misses, and no accuracy figure changes that. It also can't decide what must be withheld - that's judgement, not pattern-matching. "Fully automated" means nobody caught the misses. If accuracy matters, a person belongs in the loop.
You decide - and it's on the record
A person approves every redaction before export; exemption codes capture the why, and the redaction log keeps the record. Teams can add an approval workflow: a second person reviews the work and exports under their own name. That chain - decision, reason, record - is what stands up to a regulator or court.
Automatic detection is genuinely good - but it isn't judgement. A reliable redaction process pairs the two, and can prove who decided what.
99% of what, measured where?
That number came from a benchmark the vendor chose - not from your scans, your formats, your edge cases. Quoted without a corpus, a document type or a recall figure, it can't be checked.
Layered detection, human-checked
Layered detection - patterns for structured data, AI and manual tools for the rest, recursive checks at export. Our aim is different from a benchmark: give you the tools to take each document to 100%, signed off at your discretion.
Accuracy numbers without a corpus, a document type, and a recall figure are marketing. And even at face value: 99% across a 10,000-item disclosure is a hundred leaks.
Built for Compliance
You make every call. Everything you need for secure, verifiable document redaction.
Privacy by Default
Files open in the editor and stay on your device - no cloud processing, no data residency concerns. It works like a desktop app, no install needed.
Only content-free metadata reaches our servers - cryptographic fingerprints to verify redactions, plus redaction coordinates for optional team workflows. The files themselves - contents, text, filename, everything - stay on your device.
Stay in Control
AI never redacts on its own. Every suggestion is yours to accept, refine, or reject - per word, line, or region. Manual tools are available on every plan.
Reveal mode flips the workflow: everything starts redacted, and you reveal only what's safe to share. The control is yours, either direction.
Ready for Disclosure
Helps you meet your compliance obligations - clinical disclosures, FOI/SAR responses, insurance submissions, and more.
On Pro, every disclosure is inspectable end-to-end: Bates numbering, exemption codes, tamper-evident certificates, and CSV redaction logs.
And every disclosure leaves with its paperwork
Three files with every Pro export (the free trial runs at Pro level), a report at the recipient's end, and the account history behind them all. Depending on your business needs, you can switch any of these off - or change how they're packaged and downloaded to fit your systems.
Don't take our word for it
Every claim on this page is checkable. That is the point of the product.
Watch the network while you work
Open your browser's developer tools, work through a document, and filter the Network tab by your filename - or any phrase from your document. You get nothing: the document is never in any request. What does leave your device: anonymous usage events, and on export a cryptographic fingerprint (a SHA-256 hash) of the file. The one large transfer you will see is a download - the detection model arriving so the scan can run locally. The only exception is the optional Precision Engine - strictly double opt-in via settings - which sends extracted text for server-side enhanced detection once a Pro user has selected and consented to it.
Pricing that scales with you
From a one-off pack to organisation-wide - pay for how you actually work
Start redacting before you even have an account. One source document with Pro-level features, unlimited edits and re-exports, no card required. You'll only be asked for an email address when you want to download your redacted file.
Flex Pack
For occasional redaction work
Includes:
- Core processing features per document
- Valid 13 months from purchase
- Top up any time
- No verification certificates or audit trail
One-off payment · no renewal
Core
For individual professionals
Includes:
- On-device AI detection, 60+ PII types - up to 10x faster with the optional Accelerator
- Documents never leave your device
- PDF & image redaction, with OCR restoration
- Unlimited documents, fair use
Single user · 14-day money-back guarantee.
Pro
For regulated and audited work
Everything in Core, plus:
- The proof layer: verification certificates & full audit trail
- Precision Engine, bulk processing & exemption codes
- Legal discovery export (Bates + CSV log)
- Session checkpoints & custom exclusion list
- With 2+ seats: admin dashboard, shared codes & central billing
- Priority email support
Cancel any time · pay yearly, save 2 months
Public Sector & Contract
For procurement-led buyers
Everything in Pro, plus:
- Invoice / PO billing with payment terms
- Signed DPA, attestation pack & subprocessor list
- On-device processing, enforceable organisation-wide
- Named contact, priority phone support & onboarding options
Resellers and distributors: quote by email.
Prices shown are self-serve online pricing. Buying on invoice or purchase order? See contract pricing.
Common questions
Do my documents get uploaded anywhere?
No. The document opens and is processed in your browser. What reaches our servers is content-free: a cryptographic fingerprint to issue the verification certificate, plus redaction coordinates if you use saved sessions or team approvals - never the file, its text, or its name. (The optional Precision Engine, clearly labelled and off by default, sends extracted text for deeper analysis - never the document.)
Is the redaction permanent?
Yes. Pixel-burn destroys the content at the image level - no hidden layers, no overlay to peel back, nothing to recover. The certificate then makes any later change to the file detectable.
Is the free trial actually free?
Yes. One source document with full Pro-level features, unlimited re-exports of that document, no card. If it doesn't earn an upgrade, you've lost nothing.
I only redact occasionally - do I need a subscription?
No. Flex Packs cover 5 documents (£19) or 25 documents (£59), valid for 13 months, no subscription.
Can recipients verify a document without an account?
Yes. They scan the QR on the certificate or open the verify link - no account, no contact with you or with us. Verification also works fully offline from the export's verify.json file.
Can a second person review redactions before they're released?
Yes. On team accounts, members can be set to “approval required”: they prepare and submit redaction work, and an approver reviews the same work on their own copy of the document and exports it under their own name - the separation-of-duties control auditors call maker-checker. Every step is audit-logged.
Does it work on scans and photos?
Yes. Text recognition runs on your device, so scanned pages and images can be searched and redacted like any other page.
Do I need IT approval or an install?
It runs in a modern browser - nothing installs. (An optional desktop accelerator exists for heavy workloads, but nothing requires it.)
Redact with Confidence
Documents stay on your device. Just your email to begin.
Start RedactingNot ready to pick a plan? Start with the free document - upgrade only if it earns it.
Here's what the free trial is
So there are no surprises after you sign in.
- ✓One source document - at Pro level: automatic detection, verification certificate, audit artifacts, unlimited edits and re-exports.
- ✓Unlimited edits and re-exports of that document - rework and rerun it as many times as you need.
- ✓No card, no time limit. Just an email address.
- ✓Files never upload - on the trial or any plan. The work happens in your browser.
Drop your document in and start redacting before you even create the account - nothing counts until you export.