The redaction self-check before you share a sensitive file

Redaction is high-stakes — one mistake can leak data permanently. Before distributing any sensitive file, work through this checklist. It covers four gates: real redaction, metadata removal, PII detection, and most importantly, verifying it yourself.

① Truly delete, don't draw a box

Confirm your tool actually deletes the covered text (e.g. by rasterizing the page), not just stacking a black rectangle.

Open the actual output, search any supplied target text, review check coverage, and visually inspect every page. Having no copyable text does not rule out missed information in images.

② Strip metadata

Clear document info: author, company, creator app, create/modify timestamps. These fields expose your identity directly.

Use a workflow that considers both visible content and hidden information. Acrobat can continue from applying redactions into hidden-information removal; PrivScrub's metadata scope is document Info fields and XMP.

③ Scan the full text for PII

Use PII detection to help find emails, ID numbers, card numbers and phone numbers in extractable text. It cannot guarantee that all sensitive information is found.

Visually review headers, footers and images. PDFs with annotations, form fields or layers are outside PrivScrub's current export scope.

④ Verify yourself — don't just trust the tool

Review the filename, file hash, page coverage and incomplete checks, then inspect every output page. This workflow does not run OCR; image text needs human review.

For legal, medical, or evidence-grade redaction, consult a professional or use a certified tool.

Current PrivScrub PDF scope

PDF editing supports basic, unencrypted files up to 50 pages and 25 MiB. Nonempty annotations, internal or external links, forms, attachments, actions and layers are unsupported and stop processing before export. Redaction rebuilds every page as an image, removing searchable and accessible text from all pages. Metadata removal retains supported page content. Output checks reread the actual file, cover only listed items, and do not run OCR. Visually review every output page.

Questions

What's special about scanned documents?

A scan's visible text is in image pixels, and a scan can also have an OCR text layer. PrivScrub's output checks do not run OCR; visually inspect every scanned page.

Can I redact files in batch?

The current PDF redaction workflow processes one file at a time. Mark, generate and review each file separately; one file's passing result does not apply to another.