How to redact PDFs properly (and why most 'redactions' fail)
A black rectangle on top of text isn't redaction. Real redaction permanently removes the bytes.
Most 'redacted' PDFs you see in the wild aren't actually redacted. The most common mistake is drawing a black rectangle on top of the sensitive text, which hides it visually but leaves the original text intact in the file's data. Anyone with a PDF reader and 30 seconds can copy-paste right through the rectangle.
Real redaction permanently removes data
When pdfcraft ai redacts a PDF, we find the marked text or image regions, delete the underlying content from the PDF's text streams, and replace the marked area with an opaque mark. Searching for the redacted word returns nothing. Forensic analysis finds no trace.
Why metadata matters as much as content
Names buried in 'Author' or 'Last Modified By' fields survive visual redaction. People have been embarrassed when 'redacted' PDFs revealed sensitive content via metadata. Always strip metadata in the same pass — it's a one-click toggle.
Use AI Redact for the obvious cases
AI Redact auto-detects names, emails, phone numbers, SSN-shaped patterns, addresses, credit card numbers (with checksum validation), dates of birth, IP addresses. Run AI Redact first as a sweep, then manually redact context-specific terms.
Test before sending
Open the redacted file. Try to copy-paste from a redacted region. If you get the original text back, the redaction failed — don't ship the file. This 30-second check has saved more careers than I can count.
Posts authored collectively by the pdfcraft ai team — release notes, infrastructure updates, and editorial content where no single author is the right attribution. Read more →