Why visual redaction can fail
PDF stores drawing commands and content objects. Adding a filled rectangle over text can change what the page looks like without deleting the text object. Flattening, printing, or exporting can also preserve hidden metadata, comments, attachments, layers, form values, or older revisions.
Do not test a sensitive PDF by uploading it to an unknown online checker. Use an approved local tool or Safe to Send’s browser-local scanner.
A practical redaction check
- Work on the final delivered file. Do not inspect the source Word file or the PDF from before the last edit.
- Try to select and copy across every redacted area. Paste into a plain-text editor. This catches basic overlay failures but is not sufficient.
- Search for a distinctive redacted word or number. Search may reveal recoverable text even when selection does not.
- Extract text with a second PDF tool. Different readers interpret content differently.
- Inspect comments, attachments, form fields, layers, and document properties.
- Scan the exact file with Safe to Send. The scanner decodes supported streams and warns when text geometry appears covered by an opaque rectangle.
How to fix a failed redaction
Return to the unredacted source in a controlled environment. Use a true redaction workflow that marks content for removal and applies the redactions. Then sanitize hidden information and save to a new filename.
Adobe distinguishes redaction from sanitization: redaction removes marked visible content, while sanitization removes hidden data such as metadata, embedded content, and scripts. Follow the current instructions for your approved PDF application. Adobe’s current guidance is available in About redacting and sanitizing PDFs.
Do not “fix” a redaction by drawing a thicker rectangle, changing the text color, moving the text off-page, or taking a screenshot unless that output is independently reviewed and acceptable for the use case.
Final verification checklist
- Open the newly saved file, not the file still open in the editor.
- Search, select, copy, and extract around every redaction.
- Check attachments, annotations, form values, layers, metadata, scripts, and prior revisions.
- Run Safe to Send and confirm coverage is complete.
- Compare the SHA-256 fingerprint in the report with the exact attachment being delivered.
- For consequential disclosure, obtain independent human review.
Use the included intentionally unsafe sample PDF to see what a recoverable overlay looks like without risking a real document.