How RedactProof works
Open a document, review what detection finds, and export a file with the sensitive content burned out and a certificate anyone can check. All of it happens on your device.
- Nothing is uploaded, on any plan
- You approve every redaction
- Anyone can check the exported file
Fully featured Pro trial. No card needed.
Before anything else
Where does your document go?
Nowhere. That one decision shapes everything below.
Your document goes to their servers
Many tools send your text, or the whole document, away to be processed. From that moment, their rules apply to it.
- Their data residency
- Their retention policy
- Their breach exposure
Your document stays on your device
The document is opened, analysed and redacted on your own hardware. Neither the file nor its text ever leaves.
- No upload, on any plan
- No server copy to leak or retain
- Your residency rules stay as they are
Start to finish
Detect, redact, check
Step 1 · Detection
Step 2 · Redaction
Step 3 · Verification
Why burning matters
Two redactions. Only one of them is real.
Try selecting the black bar on the left.
Overlay tool
Pay to account: 021000021 123456789
Due within 30 days
- 1Select the barwaiting
- 2Copy itwaiting
- 3Paste anywherewaiting
A shape drawn on top of the page. The text beneath it is untouched and trivial to recover.
You just copied an account number out of a "redacted" file.
RedactProof
Pay to account:
Due within 30 days
- 1Select the barnothing to select
- 2Copy itnothing to copy
- 3Paste anywherenothing there
The page is re-rendered without those pixels and the text layer is remapped without the redacted items.
RedactProof removes the text rather than just hiding it.
Already have a redacted PDF? Inspect it with Redaction Checker, free →
After export
A certificate anyone can check
What it is
A signed page added to the end of your export, with a QR code and a short code that identifies the finished file.
How anyone checks it
Scan the code, or drop the file into the verifier. It runs on their device, with no account and nothing uploaded.
What the answer means
Unchanged since export, or changed. It confirms the file is exactly what you sent, not that every redaction was the right call.
Works offline too
Each export also comes with a small verification file, so the check still works without internet access.
How your files are processed
Files open in your browser, and every step from detection to the final burn runs on your own hardware. It works like a desktop app, without the install, and nothing is uploaded.
Only content-free data reaches us: a one-way hash of each export so its certificate can be checked, redaction positions and categories if you use saved sessions or team approvals, and anonymous usage events.
No setting, plan or add-on sends your documents or their text to us or anyone else. Even the optional Accelerator runs on your own computer, so there is nothing to switch off.
The full security model, sub-processors and retention are in the security documentation.
Common questions
How it works, in short answers
How can RedactProof find personal data without uploading my document?
Detection runs where the document is: in your browser, or in the optional Accelerator on your own computer. The detection code is downloaded to your device once, then it reads the document locally, so nothing about the document has to be sent anywhere to be analysed.
How can I check that nothing was uploaded?
Open your browser's developer tools, go to the Network tab and work through a document. You will see the app loading, a one-off download of the detection engine and a few small content-free calls, such as a one-way hash of each export. Search the requests for your filename or any phrase from the document and nothing matches.
What happens to my document if I close the tab?
The document you have open is kept in your own browser, encrypted, for up to 24 hours so you can pick up where you left off. It is deleted after that, and straight away when you sign out. It is never stored on our servers.
Is the redacted text still inside the exported file?
No. The content under each redaction is burned out of the exported file, not covered with a black box, so it cannot be copied or recovered from the PDF.
What does the recipient need to check the certificate?
Only the file. They scan the QR code on the certificate page or open the verifier and drop the file in: no account and no install. The check runs on their device and only a one-way hash is sent to look up the certificate. A small verification file included with the export lets them check it offline too.
Do I need to install anything, or ask IT?
No. RedactProof runs in a modern browser on Mac, Windows, Linux and ChromeOS. The Accelerator is an optional desktop helper for large documents. Some organisations restrict browser storage or large downloads, which the detection engine needs, so it is worth a quick check with IT if the app will not load.
See it on your own document
Every Pro feature on your first document. No card needed. Nothing uploaded.