Redact Sensitive Data in a PDF: Share Safely (GDPR/KVKK)

Before sharing a document, hiding personal data like an ID number, IBAN or address is often a legal requirement. But a black box isn't enough — the data still sits underneath. Here's real redaction.

Before sharing a contract, invoice or official document, you need to hide the personal data inside it (ID numbers, IBAN, phone, address) — often a legal requirement under GDPR/KVKK. But beware: drawing a black box over text is NOT real hiding.

Why a "black box" isn't safe

In most tools you "hide" sensitive data by drawing a black rectangle over it. But the original text stays inside the document: anyone who opens the PDF in a text editor, removes the box, or copies the text can read the data back. That's a leak and a compliance risk.

Real redaction removes the data from the document's CONTENT. Our redaction tool uses PyMuPDF to delete the data entirely — it doesn't cover it. In the redacted spot, searching, copying or recovery is impossible.

How it works — step by step

  1. Upload the PDF: Add your document to the redaction tool.
  2. Sensitive fields get found: Patterns like ID, IBAN, phone and email are detected on your device; context-based data like names and addresses is detected with AI.
  3. Remove permanently: The fields you confirm are truly deleted from the document's content. Download the cleaned PDF.

Redact Sensitive Data — Permanently remove personal data and share the document safely.

When do you need it?

  • Before sharing a contract or invoice with a third party.
  • In official applications, tenders or court files.
  • For documents published as samples/templates.

The part of the personal data detected on your device (ID, IBAN, phone, email) is not sent anywhere as it's removed; only context-based detection (name/address) sends text to the AI.

Frequently Asked Questions

How do I redact sensitive data in a PDF?

Upload the PDF; the tool finds ID/IBAN/phone/email on your device and name/address with AI, then permanently removes them with your confirmation.

Is the data truly deleted, or just covered?

Truly deleted. With PyMuPDF redaction the data is removed from the PDF's content; no box is drawn over it and it can't be read back.

Is this enough for GDPR/KVKK?

Real redaction removes the personal data from the document, making it far safer than a 'black box'. Still, it's recommended to review the result before sharing.