Redaction guide · removes data, not just covers it
How to redact a PDF so the text can't be recovered.
A black rectangle over text is not redaction — the data is still in the file. Here's how to remove sensitive content from a PDF permanently, and prove it's gone.
The black-box trap
The most common way people "redact" a PDF — drawing a filled rectangle over the text — leaves the original characters sitting in the file underneath. They can be selected, copied, extracted from the content stream, or revealed by deleting the box. The data was covered, not removed.
Real redaction deletes the underlying data and then verifies nothing remains.
// black box over text
draw_rectangle(over: ssn) // ssn still in file ✗
// real redaction
remove(ssn); verify(gone) // ✓ audited
Redact a PDF in 5 steps
- 01
Open the PDF in Omitly
No upload — the file opens locally on your machine. Nothing is sent to a server, so even sensitive documents stay where they are.
- 02
Select what to remove
Draw over names, account numbers, faces or whole paragraphs. Omitly handles both selectable text and image content inside the region.
- 03
Apply the redaction
Omitly rewrites the PDF's content streams to delete the underlying text and image data — not paint a rectangle over it — and scrubs related metadata.
- 04
Verify it's gone
An independent pass re-scans the output and confirms nothing renders, and nothing survives in the bytes, inside any redacted region.
- 05
Save with an audit log
Export the redacted PDF along with a signed, per-region audit log recording page, region, timestamp, reason and a pass/fail verdict.
Frequently asked questions
Why isn't drawing a black box over text real redaction?
Because the text underneath is still in the file. Anyone can select and copy it, delete the box, or extract it from the PDF's content stream. The data was only visually covered, never removed — which is how courts, hospitals and newsrooms have leaked redacted documents.
How do I redact a PDF so the text can't be recovered?
Use a tool that removes the underlying data from the PDF structure rather than overlaying a shape. In Omitly you select the region, apply the redaction (which deletes the text and image data from the content streams and scrubs metadata), then run a verification pass that confirms nothing survives.
Does redacting a PDF also remove hidden metadata?
It should. Sensitive data can hide in document metadata, comments and object data, not just the visible page. Omitly scrubs related metadata as part of the redaction so it isn't left behind.
Can I prove a document was redacted correctly?
Yes. Omitly produces a signed audit log recording each redacted region with page, coordinates, timestamp, reason and a pass/fail verification verdict — defensible evidence you can hand to a court, regulator or client.
Is my document uploaded anywhere when I redact it?
No. Omitly is a local-only desktop app. The document never leaves your machine — there is no upload and no content telemetry — so you can redact confidential files safely, even offline.
Redact like it actually matters.
Try Omitly free for 14 days. Remove the data, prove it's gone — all on your machine.
Join the waitlist