Isolated input
The file picker lives at app.freeredact.com inside a sandboxed, cross-origin frame. The public shell and its advertising cannot inspect the editor DOM or memory.
Under the hood
Private by architecture, not by a promise alone.
FreeRedact treats detection and sanitization as two separate jobs: first help you find risk, then create an output that no longer contains the source objects.
Local detection
OCR models, text rules, and face detection load from the private editor origin and run on your device.
Human review
Suggestions remain reversible until you accept them. You can draw manual regions and redact every exact match.
Flattened rebuild
Each page becomes sanitized pixels in a new file. Text layers, forms, scripts, attachments, and source metadata are not copied.
The deliberate tradeoff
The MVP’s secure PDF export is not searchable or editable. Preserving source objects would make it harder to prove that hidden information is truly gone.