How to check if a PDF is really redacted
To check a redacted PDF, reopen the exact file you plan to send, inspect every page, try searching and copying the removed text, and review hidden content such as metadata and attachments. If a private value is still visible or recoverable, the file fails. If those checks find nothing, they are useful evidence, but they are not a guarantee that the document contains no sensitive information.
That last distinction matters. A PDF can have correctly removed one name and still expose the same person in a signature, a filename or the description of an unusual event. Reviewing the redaction operation and reviewing the remaining disclosure are two separate jobs.
Start with the exported file
Do the review on a saved output copy, after closing the editing view. Open it from the folder you will attach it from, preferably in a second local PDF reader as well.
The editor may be showing marks that have not yet been applied. Adobe's redaction instructions distinguish marking an area, applying the redaction, choosing whether to sanitize hidden information, and saving the result. A screenshot of the marks does not establish what was saved.
Give the output a neutral filename such as contract-review-redacted.pdf. Keep the original separately. Avoid placing the client's name, account number or matter description in the attachment name after removing it from the pages.
Review the whole document, including what was left visible
Open every page at a readable size. Check the margins, repeated headers, footers, tables, handwritten notes and signature areas. Compare the original and output locally when necessary to confirm that each intended removal was applied.
Make a short list of information that must not travel with this particular document. For a fictional contract review, that might include the parties' names, home addresses, account details, signatures and a case reference that identifies the matter. The exact list depends on the recipient and purpose; a generic detector cannot decide all of it for you.
Then read the remaining text as a recipient would. If the only local employee with a particular title is described alongside a salary and a specific incident, replacing the name may still leave the person identifiable. Our guide to personal data in an AI prompt explains why combinations of facts matter.
Search for values you intended to remove
Use the reader's search function for a few known values from the original. Include a full name, an email address and a distinctive part of a longer identifier. Try variants when the original breaks a value over two lines or uses spaces inside an account number.
Finding a supposedly removed value is a clear failure. Finding nothing has several possible explanations:
- The value was removed correctly.
- The page is an image with no searchable text.
- The text encoding or OCR output differs from the value you searched for.
- The sensitive information is present in another form, such as a signature image.
Search is therefore a useful attempt to disprove the redaction. It is not a completeness test.
Try selecting and copying around the redaction
Select the area around a removed value, copy it, and paste into a local plain-text editor. Also try copying the whole page. If the original value appears, a visible covering has left recoverable text behind.
Keep this check local. Pasting the extracted text into an online checker or an AI chat would disclose the material you are trying to inspect.
An empty clipboard is not proof of a safe PDF. Image-only pages and copying restrictions can both make this test uninformative. Conversely, selectable text elsewhere is not automatically a redaction failure: some tools remove selected content while preserving accessible text in the rest of the document. The question is whether the content intended for removal survived.
Inspect hidden content and the sharing package
Review document properties, comments and attachments using your PDF tool's inspection or sanitization features. Redaction on a visible page does not, by itself, tell you what happened to those other parts of the file.
Adobe offers a separate PDF sanitization workflow for hidden information. Use the equivalent documented feature in your chosen tool and inspect the saved result again afterward.
The sharing package deserves a check too. A clean output can be sent alongside the original by mistake, or placed in a shared folder whose other files disclose the same details. Review the attachment list and destination immediately before sending.
What Velum's permanent-redaction mode changes
Velum's desktop Redact permanently mode renders each PDF page as an image, paints opaque bars into the selected regions and builds a new PDF from those page images. The output does not carry the original text layer or source document metadata. This is different from adding a movable rectangle over a page.
The implementation has a deliberate cost: the output loses searchable and selectable text, including the text a screen reader would normally use. Files can also become larger. The original remains separate, and the redacted output has no restoration mapping. The permanent-redaction release note explains the approach and its tradeoffs.
That mechanism addresses removal at the marked locations. It does not prove that every sensitive location was found. A missed name remains visible in the new page image. A missed signature or identifying sentence remains available to the recipient. Detection and human review still determine what should be removed.
For an AI task where you need names restored in the answer afterward, reversible file masking may fit the workflow better. It also needs review: placeholders do not automatically make the remaining context anonymous.
A review record you can reuse
For a repeated sharing workflow, keep a brief record beside the private original:
| Check | What to record |
|---|---|
| Purpose and recipient | Why this copy is being shared and what they need |
| Output identity | The exact filename and version reviewed |
| Visible content | Pages reviewed and categories intentionally removed |
| Recovery checks | Search and copy checks performed, including their limitations |
| Hidden content | Inspection or sanitization performed on the saved file |
| Final review | Reviewer, date and any unresolved issue |
This is a suggested working record, not a certification. It helps the next person understand which copy was reviewed and what that review covered. If a check exposes a value, regenerate the output and review it again instead of treating the earlier result as still applicable.
Can I just flatten the PDF?
Do not rely on the word "flatten" without understanding what the tool does. Flattening annotations, printing to another PDF and rebuilding pages from redacted pixels are different operations. Judge the saved output and the tool's documented removal behaviour, not the menu label.
Does a black bar mean the information is gone?
Only if the underlying content was actually removed or replaced in the output. A black bar is an appearance. The search, copy, hidden-content and page checks above help you test the file behind that appearance.
Velum's detection and redaction run on your device. To use its permanent-redaction workflow, download the desktop app, review the output locally, and send only the copy you checked.