How RedactProof works

Open a document, review what detection finds, and export a file with the sensitive content burned out and a certificate anyone can check. All of it happens on your device.

  • Nothing is uploaded, on any plan
  • You approve every redaction
  • Anyone can check the exported file
Redact your first document for free Compare plans

Fully featured Pro trial. No card needed.

Before anything else

Where does your document go?

Nowhere. That one decision shapes everything below.

Tools that upload

Your document goes to their servers

Many tools send your text, or the whole document, away to be processed. From that moment, their rules apply to it.

  • Their data residency
  • Their retention policy
  • Their breach exposure
RedactProof

Your document stays on your device

The document is opened, analysed and redacted on your own hardware. Neither the file nor its text ever leaves.

  • No upload, on any plan
  • No server copy to leak or retain
  • Your residency rules stay as they are

Start to finish

Detect, redact, check

Step 1 · Detection

Five tools for finding personal data in documentsFive tools for finding personal data
Automatic and manual, all on your device - and every result waits for human review.
I can confirm that John Smith attended on 14 March. Contact 012 3456 7890 regarding case 2024/0871; a copy is held by Smith & Partners LLP. Signed, J. Carter.
1Pattern matching60+ structured types
012 3456 7890
2On-device detectionevery suggestion reviewed
John Smith
3Search & propagaterepeats queued for you
case 2024/0871 ×14
4Exclusion listcleared once, left alone
Smith & Partners LLP
5Manual selectionbox, word and line tools for anything detection cannot judge
6Human reviewnothing redacted without approval - grouping speeds the workflow
✓ Approve ×14✗ Reject
Automatic detection accelerates the work; it does not replace judgement. Misses and false positives are inherent to any detector - which is why the layers end with you.

Step 2 · Redaction

Permanent Redaction
Drag to compare before and after
✓ Protected
I can confirm that the applicant,John Smith, attended the
consultation on 14 March. Contact:012 3456 7890
regardingcase 2024/0871. The NI number
QQ 12 34 56 Cwas verified against records
Payment to IBAN:GB82 WEST 1234 5678
⚠ Exposed
I can confirm that the applicant,John Smith, attended the
consultation on 14 March. Contact:012 3456 7890
regardingcase 2024/0871. The NI number
QQ 12 34 56 Cwas verified against records
Payment to IBAN:GB82 WEST 1234 5678
Covering text with a black box is not redaction: many tools leave the words underneath. RedactProof re-renders the page so the content under the bars is removed from the file, not hidden - which is what the certificate then evidences.

Step 3 · Verification

Evidence that survives the follow-up
No tool can prove your redaction decisions were right. What the certificate settles is everything else.
Eighteen months later

"Can you confirm this is the document you released, and that it hasn't been changed since?"

Any party - you, the recipient, an auditor - can verify it in a browser, no account, no involvement from us. The audit trail of who approved what stands ready alongside it.
✓ Verified verify.json
  • The exact file you exported, unaltered since
  • Produced from your original, never shared
  • What was withheld, by category, never the values
SHA-256  1e21cfe7…f0b3b9e  ·  signature valid
The certificate travels with its paperwork: an optional per-reference redaction schedule in the document itself, the CSV log and audit trail of who approved what in your export bundle, and a copy in Certificate History you can re-download any time.
The certificate cannot prove you redacted the right things - that judgement was yours, and the audit trail records who made it. What it gives you is tamper evidence for everything after export.

Verify it yourself →

Why burning matters

Two redactions. Only one of them is real.

Try selecting the black bar on the left.

Overlay tool

invoice_0417_redacted.pdfp. 2 of 3
Supplier ref 4471-B
Payment to IBAN: GB82 WEST 1234 5678
Due within 30 days
  1. 1Select the barwaiting
  2. 2Copy itwaiting
  3. 3Paste anywherewaiting

A shape drawn on top of the page. The text beneath it is untouched and trivial to recover.

RedactProof

invoice_0417_redacted.pdfp. 2 of 3
Supplier ref 4471-B
Payment to IBAN:
Due within 30 days
  1. 1Select the barnothing to select
  2. 2Copy itnothing to copy
  3. 3Paste anywherenothing there

The page is re-rendered without those pixels and the text layer is remapped without the redacted items.

Already have a redacted PDF? Inspect it with Redaction Checker, free →

After export

A certificate anyone can check

What it is

A signed page added to the end of your export, with a QR code and a short code that identifies the finished file.

How anyone checks it

Scan the code, or drop the file into the verifier. It runs on their device, with no account and nothing uploaded.

What the answer means

Unchanged since export, or changed. It confirms the file is exactly what you sent, not that every redaction was the right call.

Works offline too

Each export also comes with a small verification file, so the check still works without internet access.

How your files are processed

Your device

Files open in your browser, and every step from detection to the final burn runs on your own hardware. It works like a desktop app, without the install, and nothing is uploaded.

Our servers

Only content-free data reaches us: a one-way hash of each export so its certificate can be checked, redaction positions and categories if you use saved sessions or team approvals, and anonymous usage events.

No cloud mode

No setting, plan or add-on sends your documents or their text to us or anyone else. Even the optional Accelerator runs on your own computer, so there is nothing to switch off.

Security architecture · Privacy policy

The full security model, sub-processors and retention are in the security documentation.

Common questions

How it works, in short answers

How can RedactProof find personal data without uploading my document?

Detection runs where the document is: in your browser, or in the optional Accelerator on your own computer. The detection code is downloaded to your device once, then it reads the document locally, so nothing about the document has to be sent anywhere to be analysed.

How can I check that nothing was uploaded?

Open your browser's developer tools, go to the Network tab and work through a document. You will see the app loading, a one-off download of the detection engine and a few small content-free calls, such as a one-way hash of each export. Search the requests for your filename or any phrase from the document and nothing matches.

What happens to my document if I close the tab?

The document you have open is kept in your own browser, encrypted, for up to 24 hours so you can pick up where you left off. It is deleted after that, and straight away when you sign out. It is never stored on our servers.

Is the redacted text still inside the exported file?

No. The content under each redaction is burned out of the exported file, not covered with a black box, so it cannot be copied or recovered from the PDF.

What does the recipient need to check the certificate?

Only the file. They scan the QR code on the certificate page or open the verifier and drop the file in: no account and no install. The check runs on their device and only a one-way hash is sent to look up the certificate. A small verification file included with the export lets them check it offline too.

Do I need to install anything, or ask IT?

No. RedactProof runs in a modern browser on Mac, Windows, Linux and ChromeOS. The Accelerator is an optional desktop helper for large documents. Some organisations restrict browser storage or large downloads, which the detection engine needs, so it is worth a quick check with IT if the app will not load.

See it on your own document

Every Pro feature on your first document. No card needed. Nothing uploaded.

Redact your first document for free