What personal data does it detect?

Structured identifiers, where a pattern can be sure: Aadhaar, PAN, credit and debit card numbers, GSTIN, Indian phone numbers and email addresses. Names and addresses are not detected — finding those reliably needs a model, not a pattern.

Is the file uploaded to a server?

No. Detection and redaction both run in your browser, which is what makes this usable for data you are not allowed to send anywhere — including under India's DPDP Act.

Is the redaction permanent?

Yes. Every page is rebuilt as an image with the data blacked out, so the text is gone rather than covered. A rectangle drawn over live text still has the text underneath it, and any PDF reader will hand it back.

It found nothing in my scanned document — why?

A photo or a scan is an image with no selectable text in it, so there is nothing for a pattern to match. Run it through Doc Scan with Make searchable first, then redact the result here.

Security

Auto-Redact PII

Automatically find and black out the sensitive numbers in a document — Aadhaar, PAN, card, GSTIN, phone and email — before you send it on. One accidental share of an Aadhaar or card number is a real privacy breach, and under India’s DPDP Act mishandling personal data carries penalties. Detection and redaction both run on your own device, so the data never reaches a server to begin with — you can watch the Network tab and see nothing uploaded. Detects structured identifiers only — not names or addresses. Pages are flattened to images, so what it blacks out is genuinely gone rather than hidden under a rectangle.

Auto-Redact PII

More security tools

Redact by keyword

Password protect

Unlock PDF