How to redact PDFs without uploading them

To remove sensitive information, many popular tools ask you to upload the document first. For confidential files, that's the opposite of what you want.

The problem with online redaction

Web-based redactors are convenient, but the file has to leave your computer to reach their servers. Once it does, you're trusting a third party's storage, retention and security with the very information you're trying to protect. For client records, financial statements or medical documents, that can be exactly what your professional obligations tell you to avoid.

"We delete files after an hour" is a policy, not a guarantee, and it still means your unredacted document was on someone else's machine.

What "on-device" actually means

On-device (or local) redaction does all the work on your own computer. The document is opened, read, redacted and exported without ever being sent anywhere. There's no upload step, and in the strongest case there is no processing server at all, so there is nothing for your IT team to block and nothing for a third party to store.

What to look for in a local tool

• No upload: the file never leaves your machine.
• Real redaction: it removes the underlying text, not just a box on top.
• Metadata removal: it clears hidden properties on export.
• Review before export: you confirm what gets removed.
• Honest about the network: any connection (such as a licence or update check) is disclosed and never carries your document content.

How Anonyma is built

Anonyma has no upload button and no document-processing server. Detection and redaction run entirely on your Windows computer, so your files stay with you. The only times it uses the network are to check your licence and to look for updates, and neither sends any document content. That means your IT team can block outbound traffic and verify that nothing leaves.