Source SHA-256Receipt stays tied to the reviewed file
PDF redaction verification for macOS
The black box looks finished.
Check what the PDF still exposes.
Inspect recoverable text, metadata, comments, form values and embedded files before sharing a redacted PDF—locally, with explicit unknowns and a reproducible evidence receipt.
Native for MacmacOS 14+Apple notarization before launch
Native Release buildREAL APP
Unknown stays unknownNo false all-clear score
Local workflowPDFs remain on your Mac
One-time price$29 for one Mac, no subscription
Inside the actual app
Evidence, not a legal promise.
The native app keeps source hashes and document states on the left, the actual PDF in the center and reproducible pass, fail and unknown findings on the right. Unsupported evidence never becomes a silent pass.
Built for the real handoff
One focused app.
Four jobs done.
Client handoffs
Check the exported PDF before confidential material leaves the team.
Legal support teams
Create reproducible technical evidence while keeping legal judgment outside the app.
Agencies
Catch comments, form values and attachment leftovers in local review copies.
Privacy reviews
Document what was tested, what failed and what remained unknowable.
The result
redaction-evidence.jsonredaction-evidence.mdredaction-evidence.pdfsha256-manifest.txtPrivate by defaultA clear workflow
From first record
to finished handoff.
Add the exported PDFs
Choose files or a folder. RedactReceipt records each source hash and preserves locked or unreadable states without modifying the originals.
Inspect what remains
Review text-layer inventory, metadata, comments, forms, attachments and bounded visual-cover candidates with Pass, Fail and Unknown kept separate.
Copy and document
Optionally create a limited non-destructive copy for supported metadata and attachment annotations, then export PDF, Markdown, JSON and SHA evidence.
Focused by design
Useful depth.
No account clutter.
Recoverable text evidence
Inventory extractable text by page and check bounded Redact or dark Square annotation candidates for overlapping text where deterministic.
Metadata and XMP inventory
Expose Title, Author, Subject, Creator, Producer, dates and Keywords while blocking the limited copy path when embedded XMP cannot be safely rewritten.
Comments, forms and attachments
Count review annotations, filled Widget values, FileAttachment annotations and catalog EmbeddedFiles entries.
Locked and unsupported honesty
Retain source hashes and Unknown states when encryption or unsupported structures prevent inspection.
Verified limited copies
Create a separate supported metadata-and-attachment copy, re-inspect it, preserve every source and record both hashes.
Portable evidence receipts
Export PDF, Markdown and JSON findings with sanitized-copy scope notes and a SHA-256 manifest.
Practical guides
Start with the job
you need to finish.
Questions, answered
RedactReceipt FAQ
What does RedactReceipt inspect?+
It records the source SHA-256 and inventories extractable text, standard metadata, XMP markers, comments, form widgets, attachment annotations, catalog embedded files and declared or dark-square redaction candidates.
Does a passing result prove that my PDF is safely redacted?+
No. PDF appearance alone cannot prove that every secret was found or removed. RedactReceipt reports deterministic failures, passes and unknowns separately and never claims legal sufficiency.
Can it detect text hidden under a black box?+
When a declared Redact annotation or a dark Square annotation exposes a bounded region, the app checks whether PDFKit can still extract text from that region. Flattened marks, images, custom encodings and unmarked visual covers remain unknown.
What is the optional sanitized copy?+
For supported readable PDFs, RedactReceipt can create a separate copy that clears Title, Author, Subject, Creator and Keywords metadata and removes FileAttachment annotations. It re-inspects the copy and explicitly preserves other page content, forms and comments.
What happens with encrypted or unsupported PDFs?+
A locked PDF keeps its source hash and an Unknown result. XMP, catalog EmbeddedFiles and unsupported annotation structures block the limited copy path instead of being silently declared safe.
Do my documents upload anywhere?+
No. Inspection, preview, limited copy generation and receipt export run locally on your Mac in the current build. Sources are never overwritten.
How much will RedactReceipt cost?+
The price is US$29 as a one-time purchase for one Mac, with no subscription. Secure checkout and DMG delivery are handled by Polar.
RedactReceipt for macOS
The black box looks finished.
Check what the PDF still exposes.
A focused local verification desk for people who need technical evidence before a redacted PDF is shared—not another PDF editor and never a legal certificate.
- macOS 14+
- One Mac
- Launch updates included
One-time purchase$29No recurring charge
Signed with Developer ID and notarized by Apple.