Strip names, contact details, case numbers and other identifiers out of a PDF and get a clean copy back. People and organisations are swapped consistently (Witness A, Company B) so the document still reads properly.
Open source under the AGPL. Source code: GitHub · latest (.zip) · v2 release (.zip)
Your PDFs are redacted inside your own browser and never get uploaded, to us or anyone else. Here's what that means, and where it stops.
The work happens on your machine. When you add a PDF, the redaction runs right here in your browser. The file isn't sent to a server, there's no upload, and no copy is kept online. The page is locked down so the only thing it's allowed to pull from the internet is the small code library it needs to run. It can't send your documents anywhere.
That said, this is a website, so you're trusting the site. A hosted page gets served to you fresh every visit, which means you're trusting that whoever runs it is handing you the real tool and hasn't tampered with it. For everyday, non-sensitive stuff, that's a perfectly normal thing to do. If you can't extend that trust, don't use the hosted page.
Got something sensitive or privileged? Grab the offline version instead. It's a single file you download once and open with your internet switched off. It makes no network connection at all, so it can't transmit anything, full stop. That's the one to use for client files, medical records, or anything confidential. This hosted page is for quickly redacting ordinary documents.
Nothing sticks around. A redacted copy only appears when you press Download, and it saves wherever you point it. Close the tab and everything the tool was working on is gone. No account, no history.
Redaction is only as thorough as the boxes you tick, so always open the finished PDF and check it before you send it on. Everything the tool pulled out is listed under “What was removed” on each file.
Add as many as you like. It all happens on this device, nothing gets uploaded.
Loading redaction engine…