Isolated input
The file picker lives inside a sandboxed editor on a separate origin. The advertising shell cannot inspect its DOM or memory.
Under the hood
Private by architecture, not by a promise alone.
FreeRedact treats detection and sanitization as two separate jobs: first help you find risk, then create an output that no longer contains the source objects.
Local detection
OCR models, text rules, and face detection load from the editor origin and run on your device.
Human review
Suggestions remain reversible until you accept them. You can draw manual regions and redact every exact match.
Flattened rebuild
Each page becomes sanitized pixels in a new file. Text layers, forms, scripts, attachments, and source metadata are not copied.
The deliberate tradeoff
The MVP’s secure PDF export is not searchable or editable. Preserving source objects would make it harder to prove that hidden information is truly gone.