Free trial
$0
3 free exports on Apple devices
- Document redaction, saving and verification
- Automatic folder watching on Mac requires Pro
- Six checks on every copy
- No time limit or automatic subscription
- The fourth successful export requires Pro
PDF redaction for macOS and Windows
Redaction you can prove.
Permanently remove sensitive information from PDFs and scans. Save a checked copy and a report, without uploading your documents.
- Processed locally
- Encrypted when shared
- Private by design
- Name
- Marisol Quintero
- SSN
- 481-55-9027
- Card
- 4111 1111 1111 1111
- marisol@example.com
Original preview
Example data only. No file is uploaded.
Local first.
Redaction needs no upload. In personal use, nothing leaves your computer.
Encrypted sharing.
Shared with your team, documents are end-to-end encrypted on your device. We cannot read them.
Private by design.
Every page is processed on your Mac or PC, even offline.
Connections cover App Store purchases on Mac, Lemon Squeezy license checks on Windows, error reports, optional signed rule updates and, if you use it, team sharing. Documents are sent only when you share them with your team, end-to-end encrypted.
01 / The problem
A black box is not a redaction.
Many tools only paint over the page. The text is still in the file: copy, search or a metadata viewer brings it back. RedactFirst rebuilds every redacted page, so there is nothing underneath to find.
Patient: Jane R. Doe
SSN: 481-55-9027
Copied text: 481-55-9027
Patient: Jane R. Doe
SSN:
Copied text: (nothing)
Example data. Redacted pages become images, so their text can no longer be selected or searched; pages you did not redact keep their text.
02 / How it works
Three steps. Nothing left behind.
Your original file is never changed. RedactFirst always writes a new, single-revision copy.
- 01
Find
Open a PDF, a scan or a whole folder. A rule set suggests what to remove: SSNs, card and account numbers, emails, phone numbers, dates of birth, addresses, names and your own word lists. Scanned pages are read with the text recognition built into your computer.
- 02
Review
Every suggestion is a box you approve, ignore or redraw. Label boxes PII, PHI, PRIVILEGED or (b)(6). Find one value and RedactFirst marks it everywhere, in every way it is written.
- 03
Save & verify
RedactFirst rebuilds the copy, re-opens it from disk and runs six checks that do not share code with the redaction itself. Only a copy that passes is saved, next to its PDF and JSON report.
03 / Verification
Six checks before anything is saved.
The check is independent of the code that removed the text. If any check fails, the copy is held back, and RedactFirst shows which text remained on which page, masked.
How the engine works →
- 01Text. Page text and every content stream, read through the font maps and as raw bytesPassed
- 02Stored. Every object, decoded stream and the file's own bytes: plain, UTF-16 and hexPassed
- 03Pages. Each redacted page is a single picture: no fonts, no text, no annotationsPassed
- 04Document. The whole file, unused resources included: one revision, no stray objectsPassed
- 05Hidden. No invisible, off-page, covered or background-colored content remainsPassed
- 06Pixels. The pixels under every box are its fill color, box by boxPassed
A clean file, every time
Every saved copy keeps its pages and little else. These are removed from every output:
- Document info & XMP metadata
- Attachments
- JavaScript & actions
- Layers
- Thumbnails
- Tag tree
- XFA forms
- Old signatures
- Earlier revisions
- Hidden & off-page text
- Matching bookmarks
- Matching comments & form fields
04 / Private by design
We never see your documents.
- Processed on your computerOpening, text recognition, name finding, redaction and checks all run locally.
- Nothing uploaded to redactIn personal use, documents, their text and findings never leave the machine. Shared with your team, they are end-to-end encrypted first.
- Account optional, no trackingRedaction needs no sign-in; only team sharing does. No analytics or advertising inside the app. Error reports carry no files or document contents.
- Works offlineOnly license checks, error reports, optional signed rule updates and team sharing use the network.
- Your originals stay untouchedCopies are new files in a folder you choose. Temporary files are deleted.
05 / Built for real caseloads
From one exhibit to a whole production.
Checksums keep numbers honest: card numbers pass Luhn, IBANs pass mod 97, routing numbers pass their checksum, before they are ever suggested.
What RedactFirst finds
- Social Security numbers
- Canadian SIN
- EIN & ITIN
- Medicare MBI
- Card numbers
- IBAN
- ABA routing
- Account numbers
- Emails
- US & Canada phones
- Dates of birth
- Street addresses
- Person names
- VIN
- IP addresses
- Passport & license (labeled)
- Medical record & policy numbers
- Your word lists
- Custom patterns
- 01
Batch folders
Drop a folder, apply one rule set, get a folder of checked copies and a summary report.
- 02
Watch folder
Automatically redact new files in a chosen folder while the app is open, using your selected rule set. Files are processed without manual review.
- 03
Rule sets & templates
Ready-made sets by line of work. Save and share your own as JSON, and try them on sample text first.
- 04
Reports you can file
A PDF and JSON report per copy: SHA-256 of input and output, rule set, every redaction by page and type, every check.
- 05
Labels and stamps
Per-box labels such as PII, PHI or (b)(6), page stamps and Bates numbering.
- 06
Compare before saving
Original and redacted preview side by side, with the list of pages that change.
- 07
Open from anywhere
Finder's Open With, the Services menu, Explorer's right-click menu or the command line.
- 08
History on this computer
Every copy with its report details, kept locally. Turn it off or clear it any time.
- 09
Six languages
English, Spanish, German, French (Canada), Portuguese (Brazil) and Turkish.
06 / Who it is for
Personal documents. Business records. Your control.
Personal use
Remove details you do not need to share from your own documents, directly on your computer.
- Bank statements and financial records
- Applications and supporting documents
- Names, addresses and account numbers
Business use
Prepare client, employee and business documents for sharing, with reviewed redactions and a verification report.
- Client and employee records
- Review suggestions before saving
- Process multiple files in a batch
The same license terms cover personal and business use.
Law firms
Exhibits, productions and filings with privileged or personal details.
Accounting & tax
Returns, statements and payroll with SSNs, EINs and account numbers.
HR teams
Applications, reviews and investigations shared outside the team.
Medical offices
Records and claims that must go out without patient identifiers.
Insurance
Policy and claim files with personal and financial data.
Public records
FOIA and access-to-information releases with exemption labels.
07 / Compare
Not all redaction is equal.
See how RedactFirst differs from cover-up tools, subscription PDF suites and cloud services.
See the comparison →- Removes the text under a boxYes, page rebuilt as image
- Re-opens and checks the saved copySix independent checks
- Holds back a copy that failsAlways
- Report per file (PDF + JSON)Yes, with SHA-256
- Removes metadata, scripts, historyAlways
08 / Pricing
Choose your Pro plan.
One Apple Pro purchase works on Mac, iPhone and iPad with the same Apple Account. Mac offers Yearly and Lifetime; iPhone and iPad also offer Monthly. Apple shows the local price and tax before payment.
Need seats for a team, a purchase order or an invoice? Talk to us.
Apple Pro
See purchase options
Yearly or Lifetime on Mac; Monthly also on iPhone and iPad
- One Pro entitlement across Mac, iPhone and iPad
- Restore with the same Apple Account
- Lifetime covers the purchased major version
- PDF + JSON reports for every copy
- Signed rule template updates
refund policy · license agreement · Subscriptions renew until canceled. Lifetime is a one-time purchase for the purchased major version. Failed or canceled exports do not use a free export.
09 / Download
RedactFirst for your computer, phone and tablet.
Open PDFs or scans, review sensitive areas, redact and verify the copy on your device. Choose Mac, Windows, iPhone & iPad or Android below.
Downloads are not available yet. Contact us for release availability. Ask about availability
iPhone, iPad & Android
Scan a document or open a PDF, review the areas to remove, redact and verify the copy on your phone or tablet.
iPhone & iPad
iPhone & iPad · iOS 17+
Coming soon
Android
Android 8+
Coming soon
Mac & Windows
Redact PDFs and images on Mac with batch processing and verification reports. Apple devices include 3 successful free exports. Folder watching requires Pro. Windows development is deferred.
Mac
Universal · Apple silicon & Intel · macOS 13+
Coming soon
Windows
x64 · Windows 10 (64-bit) & 11
Coming soon
Windows direct download
Coming soonDesktop: macOS 13 or later; Windows 10 (64-bit) and 11. Windows on Arm runs the x64 build. Mac purchases use the App Store; Windows keys do not unlock the Mac version. Mobile availability is shown in the relevant store listing.
Trust
Built to be trusted
What we can back up about your privacy, your data and your payment. We hold no certification ourselves; where a certification is named, it belongs to the provider that holds it.
Privacy and security in detail →Redacted on this computer
Documents are redacted on your Mac or PC. In personal use they are never uploaded; documents you share with your team are end-to-end encrypted first, and we cannot read them. Your originals are not changed.
GDPR
Your documents are processed on your computer. Error reports rely on legitimate interest, and you can turn optional diagnostics off.
California privacy (CCPA/CPRA)
We do not sell or share your personal information.
HIPAA: local processing
In personal use, documents are redacted on your computer and never uploaded, so we do not receive protected health information (PHI). Documents you share with your team are stored with us only end-to-end encrypted, and we cannot read them. Your organization stays responsible for its HIPAA compliance; we do not sign Business Associate Agreements.
Sentry: ISO 27001 and SOC 2 Type 2
Error reports are processed by Sentry, which holds these certifications.
License stored securely
The app keeps your license in the macOS Keychain, or on Windows in storage protected by DPAPI.
Where you buy
Payments by Lemon Squeezy and Stripe
Website purchases are handled by Lemon Squeezy, a Stripe company and the merchant of record; payments run on Stripe's PCI DSS Level 1 certified infrastructure. We never see your card.
Mac App Store
If you buy the Mac App Store edition, Apple handles the purchase, payment and refunds.
App Store · iPhone & iPad
For iPhone and iPad purchases through the App Store, Apple handles payment and refunds under its policies.
Google Play · Android
For Android purchases through Google Play, Google handles payment and refunds under its policies.
Microsoft Store
If you buy the Microsoft Store edition, Microsoft handles the purchase, payment and refunds.
10 / Questions
Straight answers.
Is the redaction really permanent?
Yes. Every page with a redaction is rebuilt as a picture with the boxes painted into its pixels, so the text under a box no longer exists in the copy. The copy is then re-opened from disk and checked six ways. A copy that fails is not saved.
Do my documents ever leave my computer?
Not in personal use. A document leaves your computer only if you share it with your team, and then it is end-to-end encrypted on your device first; RedactFirst cannot read it. Other connections cover App Store purchases on Mac, Lemon Squeezy license checks on Windows, error reports and optional signed rule updates, and carry no document data.
Does it work with scanned documents?
Yes. Pages without a text layer are read with the text recognition built into macOS or Windows. Recognized boxes are drawn generously and the app asks you to look closely, because recognition of scans is never perfect.
Does RedactFirst make me HIPAA, GDPR or CCPA compliant?
No software can do that on its own. RedactFirst is a tool that helps you remove information and documents what it did; you decide what to remove and remain responsible for your obligations. Its suggestions can miss things, so review every page.
What happens after the free exports?
Apple devices include three successful, watermark-free document exports with reports, without a time limit. Failed or canceled saves do not count. A fourth export requires Pro. You can still open, search and review documents, and keep previous outputs. No automatic subscription starts.
Does one purchase work on my Apple devices?
Yes. Monthly, Yearly and Lifetime share one Pro entitlement on Mac, iPhone and iPad using the same Apple Account. Restore Purchases restores access. Windows licenses are separate; Windows development is deferred.
Which plans are available on each device?
iPhone and iPad offer Monthly, Yearly and Lifetime. Mac offers Yearly and Lifetime and also recognizes an active Monthly subscription bought on iPhone or iPad. Lifetime does not automatically cancel an existing subscription; manage its renewal in your Apple Account.
Are names found on Windows too?
On macOS, names are suggested with the language tools built into the system. On Windows, names are found from the word list you enter, such as client or patient names. Every other detector works the same on both.
Which file types are supported?
PDF, including password-protected PDFs, and scanned images in PNG, JPEG and TIFF. Images are turned into a PDF first and then redacted like any other document.
Processed locally · Encrypted when shared