PDF redaction for SMBs: the complete guide

Redacting a PDF means permanently removing sensitive data — not dragging a black box over it, which anyone can undo in 30 seconds. This guide explains the real process.

PDF redaction is the permanent removal of text, images, or metadata from a document so that it can no longer be recovered. Sounds straightforward — it isn't. Every year there are news stories about organisations that published a "censored" PDF where the hidden text was visible again within 10 seconds.

Why "black bars" don't work

Dragging a black rectangle over text (in Word, Preview, or even Acrobat without the redact function) does exactly two things: it places an object on top of the original text. The text itself stays in the document. Copy-paste, or remove the rectangle, and the data is visible again. See why black bars don't work.

What real redaction looks like

\n
1. Text is replaced by a filled block and a placeholder (e.g. "[redacted]").
\n
2. Metadata is stripped: author, revisions, comments, track changes.
\n
3. The underlying file structure is cleaned up — old objects that are no longer visible but technically still present in the PDF are discarded.
\n
4. The result is a new PDF that contains none of the original data.
\n

Use cases in SMBs

\n
• CV redaction before sharing CVs with a client or forwarding them for a project.
\n
• Contracts for reference — amounts and client names removed for sales pitches.
\n
• Legal documents — national ID numbers, dates of birth, and contact details removed.
\n
• Grant applications with internal figures removed.
\n
• External audit reports anonymised by removing internal code references.
\n
• Medical records shared with other healthcare providers.
\n

Legal framework (GDPR)

Pseudonymisation and anonymisation are explicitly addressed in GDPR Art. 4. Anonymisation (i.e. redaction that makes identification impossible) takes data outside the scope of GDPR. Pseudonymisation reduces risk but remains subject to GDPR. See GDPR implications of redaction.

What to compare when choosing a tool

\n
• Is data permanently removed (not just dragged over or replaced with asterisks)?
\n
• Is metadata and hidden content stripped?
\n
• Audit trail — can you demonstrate later exactly what was redacted?
\n
• OCR — does it work on scanned (image-based) PDFs?
\n
• Bulk / pattern mode — multiple documents at once, or can you apply a pattern like "all national ID numbers"?
\n
• Price / licence model — see tool comparison.
\n

Our tool PDF Redact (Pro and Business plan) handles all of this without a €20/month Adobe Pro subscription; the Business plan adds pattern mode and an audit log for compliance-driven redaction.

Further reading: stripping metadata, OCR for scanned PDFs, recognising national ID numbers, redaction after offboarding.