A black rectangle is often only decoration
PDF pages contain separate objects: text, images, vectors, annotations and form fields. Drawing a filled rectangle above text changes what the page looks like, but it may not remove the text object underneath. A recipient can sometimes select, copy, search, extract or programmatically read the supposedly hidden words.
The five-minute redaction test
- Open the redacted PDF in another viewer.
- Press Ctrl/Cmd+A and copy into a plain-text editor.
- Search for a word you covered.
- Try a PDF text extractor.
- Inspect comments, annotations, layers and metadata.
If any sensitive content survives, do not send the file.
How safe redaction works
A robust process removes the target content or rasterizes the affected page and burns the redaction marks into the pixels. Bindery uses the latter approach for marked pages: it renders the page, applies solid boxes and writes a flattened image back into a new PDF. There is no text layer beneath those boxes.
The trade-off: searchability
Rasterizing a redacted page intentionally removes selectable text from that page. Untouched pages can remain unchanged. If the non-sensitive text on a redacted page must stay searchable, a specialized content-removal engine is preferable—but it must delete text, vector and image content inside the redaction region, not merely cover it.
Redaction is more than the visible page
Review document metadata, attachments, comments, hidden form fields, previous revisions and filenames. Use Clean Metadata after redaction, and consider password protection for controlled delivery. Encryption does not replace redaction: authorized recipients can still inspect the content once opened.
A safe workflow
- Work on a copy of the original.
- Mark sensitive regions in Redact PDF.
- Export the flattened result.
- Strip metadata.
- Run the copy/search/extraction tests.
- Have a second person review high-stakes documents.
- Share only the verified output.
Scanned pages can leak too
A scan may already contain an invisible OCR text layer. Covering the visible pixels does not necessarily remove that layer. Conversely, removing only searchable text does not remove sensitive pixels from the page image. Safe redaction has to account for both representations.
Bindery flattens marked pages into new page images after applying the redaction boxes, which removes the previous text layer and burns the visible concealment into the output. Afterward, searching for a covered name should return nothing.
Annotations, attachments and revision history
Comments and drawing annotations can carry author names, timestamps and text that never appears in the printed page. Embedded files can contain an unredacted source. Some authoring systems also preserve revision history outside the final PDF. Export a clean PDF rather than sending the editable source package, inspect the attachment panel, and remove document metadata before release.
High-stakes redaction needs two-person review
For legal disclosure, safeguarding, journalism or regulatory responses, use a written checklist and a second reviewer. One person performs the redaction; another searches the exported file, attempts text extraction and compares every marked region with the source. Record which output was approved and distribute that exact file.
No automated tool can decide which facts are legally or contextually sensitive. Software can make removal reliable, but classification and final approval remain human responsibilities.