Online PDF redaction tools: what happens to your file

Search for "redact PDF online" and you'll find plenty of free tools that work in a browser tab. They're convenient. But there's one step that's easy to overlook: to redact a document online, you usually upload the unredacted original first.

What happens, step by step

1. You upload the original. The full document, with everything you meant to hide, travels to the provider over an encrypted connection.
2. It's processed on their servers. The redaction happens on a computer you don't control.
3. You download the result. You get the redacted copy back.
4. The provider deletes the files. At least, that's the policy. You can't check it yourself.

What the popular tools say

These are the providers' own statements, as they read when we checked on 18 October 2026:

• Smallpdf says files are automatically deleted after one hour. Its redact page also describes processing both in your browser and on its servers.
• iLovePDF says documents are deleted within two hours of upload, and offers a "Delete it now" button after processing.
• PDF24 says files are deleted from its server after one hour, and that its servers are in Germany.
• Sejda says files are deleted after two hours. Its editor offers Whiteout, which Sejda itself says doesn't remove underlying text and isn't suitable for sensitive data.

Short deletion windows are a good sign. They still mean the original exists, briefly, somewhere other than your computer.

Questions to ask before you upload

• Would you email this document to a stranger? If not, think twice about uploading it.
• Is it yours to share? Client files, employee records and other people's details may come with confidentiality duties. Check your own obligations.
• Does the tool remove content or cover it? A tool that only draws boxes leaves the text in the file.
• Can you check the result? Whatever tool you use, select all, copy and paste the redacted copy into a text note before sending.

When online tools are fine

For documents that aren't sensitive, or when you're on a computer where you can't install anything, an online tool is a reasonable choice. The trade-off is the upload.

The alternative

Ombly is built so the original never has to leave your computer. It suggests what to hide, including IBANs and ID numbers, and rebuilds every page from pixels on your own machine. Join the waitlist, or see the full comparison with online redaction tools.

And if you're not sure whether a black box really hides anything, read A black box is not a redaction.