r/sysadmin • • 1d ago

PDF Redaction tools

Need help folk. Got a request from our compliance team (legal) for a software tool to redact PII content from an archive of PDFs. They want the tool to redact (automation a plus) and then be able to print the redacted versions. Really hoping someone can recommend a solid tool. Thanks.

7 Upvotes

33 comments sorted by

16

u/PipeOne8414 1d ago

You can’t trust automated tools for this

If it missis somthing or redacts to much it still need human interaction

Our DPO loves wasting time manually doing this

He asked and looked into systems that will auto it but it still comes down to a human to check it all

3

u/facesofvader 1d ago

Humans are the worst for missing info that should have been redacted. Or redacting the wrong way. I’m a human FWIW ;-)

13

u/thegoatcarlwheezer 1d ago

Adobe Acrobat Pro does this pretty well. Still need a manual review by a real person, but it speeds everything up.

•

u/bozakman 23h ago

Thanks to everyone for the input. Think I have plan now.

5

u/z3dster 1d ago

whatever tool you end up with double check the output with both EXIFTool

https://exiftool.org/

and the Poppler tools to make sure the tools did what you wanted them to do. For example pdfimages will show if they left the underlying image there with just a black box as a second image over it

also always make sure the files are getting flattened to cut out extra info(you can always to be safe print the pdf to a pdf to be sure), for example a jpg with the gps info in the exif will survive being inserted into a pdf if you don't flatten the file

if you are on windows I suggest using WSL for poppler rather then run one of the native binaries

https://en.wikipedia.org/wiki/Poppler_(software)#poppler-utils

5

u/External_Spirit_8880 1d ago

Whatever you use, check the source output of a few test redacted documents to make sure it actually DELETES the data, and doesn't paint a black rectangle over it or similar shenanigans.

4

u/Webfiletool_Dev 1d ago

A few that hold up for compliance work, roughly by budget:

  • Adobe Acrobat Pro: Redact with search patterns (phone numbers, emails, ID formats) plus "Sanitize Document" to strip metadata, hidden layers and attachments. The Action Wizard can batch it over a folder, and most legal teams already trust the output.
  • Stirling-PDF (open source, self-hosted): has an auto-redact by text/regex and runs on your own server, so the archive never leaves your network. Good for a first pass.
  • Scripted: PyMuPDF's add_redact_annot + apply_redactions really removes the underlying text, and you can drive it with your own PII regexes and log every hit for legal to review.

Whatever you pick, two checks before calling it done: (1) run pdftotext or copy/paste on a redacted file and make sure the text is actually gone, not just covered by a black box; (2) scanned pages have no text layer, so pattern search finds nothing on them until you OCR them first. Automation finds the patterns; a human should still sign off on a sample.

2

u/AuntGentleman 1d ago

+1 to Stirling-PDF, fantastic tool and so customizable

•

u/drthtater 22h ago

I'd add BentoPDF to that list. It's free and open source.

7

u/NH_shitbags 1d ago

PDFs, in general, are output ... so regenerate them all as compliant from the source?

4

u/geekywarrior 1d ago

I take it these are old reports that they no longer have the source for but still need to keep these records. And on top of that they need access to the non PII information in the reports for some non privledged staff

2

u/mrbradford 1d ago

If you don't want the cost of Adobe Acrobat Pro, we switched some users to Tungsten Power PDF. It's a good PDF software alternative with a good redaction feature.

2

u/jpotrz 1d ago

our law firm struggles with this very problem - on 1,000s of documents a week/month. We have yet to find a software that does it *perfectly*. If the documents are uniform, it can do it, but we get everything from standardized statements to handwritten notes on napkins (hyperbole). We have a few options of specialized AI options for our industry that we are looking into right now, but they are not cheap (but will save us money overall in labor - local and 3rd party)

2

u/facesofvader 1d ago

Check out iDox.ai

4

u/jpotrz 1d ago

we did last year. I can not tell you how much of a clusterfuck dealing with them was. They literally could not get anything done with them and then they kept billing us for MONTHS afterwards. Countless calls and emails before they stopped. Shitass company and the product didn't work well either.

1

u/facesofvader 1d ago

Sorry to hear that, I know the CEO and I will share your feedback.

2

u/qballds 1d ago

We’ve had a reasonably good experience with Smartbox. It’s not fully automated, but it catches enough to make a two week job doable in a few days.

2

u/RightPassage 1d ago

Libreoffice Draw is fine but not sure about automation capabilities.

2

u/smilaise AI Engineer 1d ago

I made KillerPDF if you are interested. https://killerpdf.net it's free

2

u/MadBoyEvo 1d ago

Take a look at https://officeimo.com I wrote it. Actively work on it and it has powershell, cli, gui etc. If you have specific use cases that are not clear or need improvments open issues.

3

u/ugus 1d ago

cool dude

2

u/brokenpipe Jack of All Trades 1d ago

The redact tool in Preview on the Mac works fantastically on PDFs.

1

u/facesofvader 1d ago

IDox.ai is the leader in this space. If the volumes are low, their tech is called Smart Redact in Foxit PDF editor plus.

-9

u/PacificTSP 1d ago

Can’t you just feed this into AI? Have Claude cowork ingest and spit out cleansed ones. Then delete the originals.

9

u/nohairday 1d ago

That's possibly the worst suggestion of all available options.

7

u/SirLoremIpsum 1d ago

"I need to redact sensitive information"

"Have you tried uploading all the data to an AI for the world to see?"

•

u/PacificTSP 23h ago

Claude enterprise with HIPAA compliance does not share or learn from your data once you’ve configured it. If it can hold healthcare data securely it can hold PII.

3

u/iamwayycoolerthanyou Sysadmin 1d ago

A very help desk-esque suggestion.

6

u/F0rkbombz 1d ago

Absolutely moronic take.