What this contract redactor does
Before you send a contract to a vendor, landlord, client or government office, it usually needs a cleanup pass: the email addresses, phone numbers, identity numbers and bank details inside it were meant for the signing parties, not for everyone who will ever see the file. This tool automates that pass. You upload the contract PDF, it automatically finds personal details — PII (Personally Identifiable Information) — using on-device pattern detection, lays every finding out for your review on page previews, and then permanently deletes the ones you confirm. The rest of your document is untouched: text stays selectable, layout stays identical.
Two things make it different from most online redaction tools. First, nothing is uploaded — the scan and the redaction both happen inside your browser, so a confidential contract never travels to someone else's server. Second, the redaction is true deletion: the sensitive text is removed from the file's content, not painted over. You can verify it yourself — try to select or copy the redacted text in the downloaded file. It is gone.
How auto-redaction works (4 steps)
- Upload. Drop your contract PDF (up to 50 MB). It is read into your browser's memory; no server is involved.
- Auto-scan. The tool reads the PDF's text layer and runs contract-focused detection rules: email addresses, Indian and international phone numbers, PAN (Permanent Account Number) numbers, Aadhaar-format numbers (validated with the Verhoeff checksum so random 12-digit strings are ignored), IFSC (Indian Financial System Code) codes, web addresses, long account-like digit strings, plus any custom terms you add — names, company names, case numbers.
- Review. Every finding appears in a grouped list and as a red box on a preview of its page. Uncheck false alarms, add custom terms and re-scan if needed, then tick the confirmation that you have reviewed everything. The download stays locked until you do — because no automatic detection is perfect, and a missed phone number in a shared contract is a privacy failure.
- Redact & verify. One click deletes the confirmed text from the PDF's content streams, strips document metadata (author, creator, producer fields that can leak identity), and then re-extracts the output's text to prove the redacted values are unrecoverable — the page shows you a verification note either way.
What it finds in your contract
- Email addresses — of signatories, HR contacts, vendors mentioned in annexures.
- Phone numbers — Indian mobile patterns (including +91) and international formats.
- PAN numbers — the 10-character tax identity format (5 letters, 4 digits, 1 letter).
- Aadhaar-format numbers — 12-digit numbers that pass the Verhoeff checksum, so invoice numbers and reference codes are not flagged by mistake.
- IFSC codes — bank branch identifiers that appear in payment clauses.
- Possible account numbers — long digit strings (9–18 digits), flagged as low-confidence so you decide.
- Web addresses — URLs that can identify internal systems.
- Custom terms — anything you type: a person's name, a company, a project code name. This is how you catch what patterns cannot.
Redact a PDF without uploading it anywhere
Almost every free "redact PDF online" tool works the same way: your file goes to their server, gets processed there, and you download the result. For a holiday photo that is fine. For a contract — which may contain signatures, commercial terms, identities and bank details — it means handing your most sensitive document to a stranger's infrastructure and trusting their retention policy. This tool inverts that: the PDF parsing, the detection, the preview rendering and the redaction engine all run as JavaScript in your tab. Close the tab and nothing remains. If your threat model includes "my contract must never sit on someone else's disk," browser-local is the only architecture that satisfies it.
True redaction vs black boxes: why it matters
There are two ways to "redact" a PDF, and only one of them is real. The fake way draws a black rectangle over the text — the words are still in the file, still selectable, still copy-pasteable, still extractable by anyone who knows to look underneath. Court guides (including the US federal courts' e-filing redaction tips) explicitly warn that highlighting text black or covering it with a box does not protect the data. The real way — true redaction — deletes the text from the document's content streams and then draws the black box only as a visual marker. This tool does the real way: it interprets each page's content, removes every text, image and vector element under your confirmed boxes, overwrites the original streams in place (so no recoverable bytes linger), and stamps black boxes where the content was. After downloading, select-all and copy the page — the redacted values are simply not there. The verification step on this page proves it automatically for every file.
What pattern detection honestly cannot find
Detection here is deterministic pattern matching, not AI (Artificial Intelligence). Patterns are excellent at things with a shape — emails, phone numbers, ID numbers. They cannot reliably find personal names or street addresses, because names have no shape a regex (regular expression) can recognize without drowning you in false positives. That is an industry-wide limitation, not a bug in this page. The honest workflow: add the names, company names and addresses as custom terms before you scan. The mandatory review step exists for the same reason — automation proposes, you dispose.
Before you share a contract: typical uses
- Freelancers sharing a client agreement as a portfolio sample — strip your phone, email and bank details first.
- Tenants sending a rent agreement to a new landlord or society office — mask the previous owner's contact details.
- HR teams circulating offer letters internally — remove candidate phone numbers and addresses.
- Founders sharing a vendor contract with an advisor — hide commercial terms' counterparties' contacts.
- GDPR (General Data Protection Regulation) cleanups — preparing documents for disclosure with direct identifiers removed.
This page helps you prepare a redacted copy. It is not legal advice, and it cannot certify compliance with any regulation or court rule — for formal filings, have your counsel verify the output.
Frequently asked questions
Is this PDF redactor really free?
Yes. No sign-up, no watermark, no page limits, no "3 free tasks per hour" like some online tools. Redact as many contracts as you like — it costs nothing because there is no server doing the work; your own browser does it.
Is my contract uploaded to a server?
No. Upload here means "read into your browser's memory." The PDF never leaves your device — no upload, no cloud processing, no retention policy to trust. For confidential contracts, that is the whole point.
What personal details does it find automatically?
Email addresses, Indian and international phone numbers, PAN numbers, Aadhaar-format numbers (checksum-validated), IFSC codes, possible account numbers, web addresses, and any custom terms you add. Findings are grouped by type for review.
Does it find names?
Not automatically — names have no detectable pattern, and any tool that claims otherwise is guessing. Add names, company names and addresses as custom terms (comma-separated) and press "Scan again"; they are found by exact match and listed for redaction like everything else.
Can the redacted text be recovered from the downloaded PDF?
No. Redacted text is deleted from the page content streams — not covered — and the original stream bytes are overwritten in place. The tool then re-extracts the output's text and shows you a verification note confirming every redacted value is gone. Copy-paste and text extraction cannot bring it back.
How is this different from drawing black boxes over text?
Black boxes drawn in most editors are annotations sitting on top of live text — the words remain selectable underneath. This tool removes the underlying text first and draws the black box only as a marker. That is the difference between hiding and redacting.
Does the rest of my PDF stay selectable and searchable?
Yes. Unlike tools that rasterize pages into images (which destroys the whole text layer), true redaction here removes only the confirmed sensitive elements. Everything else — clauses, headings, tables — remains selectable text, and the file stays compact.
My contract is a scanned PDF. Will it work?
Detection needs a text layer, so pure image scans cannot be auto-scanned — the tool tells you so instead of failing silently. Run the scan through an OCR (Optical Character Recognition) step first to get a searchable PDF, then redact it here. Or mask regions by hand with our Redact PDF tool.
How do I redact email addresses from a PDF?
Upload the PDF — email addresses are detected automatically and listed under "Email address" with a page preview each. Review, confirm, redact, download. To catch a specific address, you can also add it as a custom term.
How do I redact phone numbers from a PDF?
Same flow: phone numbers (Indian mobiles with or without +91, and international formats) are auto-detected and grouped under phone findings. Uncheck any number-like reference codes that should stay, confirm, and redact.
Is the output GDPR-compliant?
No tool can promise that for you. This page removes the common direct identifiers on your own device, which is a solid step for data-protection cleanups — but compliance depends on your full process, your legal basis and your review. Treat the mandatory review as essential, and have counsel verify anything filed formally.
How is this different from your Redact PDF and Medical Report Anonymizer tools?
Redact PDF is fully manual — you draw every box yourself; best for anything unusual. Medical Report Anonymizer auto-detects medical identity details (patient, doctor, diagnosis context) and rasterizes pages. This tool is the contract specialist: it auto-detects contract-type PII and applies true redaction while keeping the text layer intact.
Related tools
- Redact PDF — draw black boxes by hand; true deletion, your control, any document.
- Medical Report Anonymizer — auto-detect patient and doctor details in medical reports.
- Screenshot Auto-Redactor — blur sensitive text in screenshots and photos.
- Court PDF/A Converter — prepare PDFs for court e-filing.
- OCR PDF — make scanned PDFs searchable before redacting.
- Edit PDF Metadata — view and clean document properties.