RedactOffline
Security & Privacy

Your documents never leave your browser

Most online document tools send your files to a server. RedactOffline is different: we built it so that is technically impossible. Privacy by architecture, not by promise.

Six Layers of Privacy Protection

Zero File Transmission

When you open a document in RedactOffline, it is loaded directly into your browser's memory. It is never uploaded to any server. There is no network request containing your file, not even an encrypted one.

No Backend, No Server

RedactOffline has no document processing backend. The app is a static web application, it only serves HTML, CSS, and JavaScript. All processing is performed by code running inside your browser tab.

WebAssembly Processing Engine

All document parsing, generation, and text recognition run as WebAssembly modules inside the browser sandbox. This gives native performance without any server round-trip.

No Analytics on Your Documents

We do not track file names, document content, redaction patterns, or anything related to your documents. Any analytics we collect are limited to standard usage metrics (page views) and never include document data.

Works Offline After First Load

Once the app has loaded in your browser, you can disconnect from the internet. All redaction operations continue to work because nothing requires a server connection.

Permanent, Irreversible Redactions

Exported PDFs contain truly permanent black regions. The underlying text and image data is removed from the PDF byte stream, not just visually covered. It cannot be retrieved by copy-pasting, metadata inspection, or file analysis.

How the Architecture Works

1

You open RedactOffline in your browser

The browser downloads the app code (HTML/JS/WASM) from our servers once. After that, no server is involved in document processing.

2

You open a document

The file is read by your browser's File API directly from your local storage into browser memory (RAM). It never leaves your machine.

3

Redaction is applied

The WASM engine processes the PDF/image in memory. Redaction boxes are written into the PDF byte stream. All computation happens locally.

4

You download the redacted file

The browser generates a download from your local memory. The file goes directly to your device's Downloads folder. No server involved.

Regulatory Compliance

GDPR (EU General Data Protection Regulation)

  • Data minimization: we never collect document data because we never receive it.
  • Purpose limitation: no secondary use of your document content is technically possible.
  • Storage limitation: nothing is stored on our end. Your files remain on your device only.
  • Cross-border transfer: no document data crosses any border, it never leaves your browser.

HIPAA (Health Insurance Portability and Accountability Act)

  • Protected Health Information (PHI) in documents is never transmitted to our infrastructure.
  • No Business Associate Agreement needed, we are not a business associate because we never handle your data.
  • Audit trail stays on your device, you control all logs.

CCPA (California Consumer Privacy Act)

  • We do not sell, share, or monetize your document content.
  • Zero data collection means zero CCPA obligations on document data.
  • Consumers have full control, documents never leave their browser.

Threat Model

Transparency about what we protect against, and what we do not.

Threat
Risk
Why
Data breach on our servers
None
We do not store your documents, so there is nothing to breach.
Man-in-the-middle attack intercepting your files
None
No file is transmitted. There is no traffic to intercept.
Unauthorized employee access
None
Our team has no technical access to your documents.
Third-party integrations leaking data
None
No third-party service receives your document content.
Browser compromise (local device)
Your responsibility
If your browser or device is compromised by malware, local data may be at risk. Keep your OS and browser updated.

Handle sensitive documents with confidence

Try RedactOffline, the redaction tool that cannot leak your data.

Start Redacting for Free