I have an internal audit file with payroll line items and personnel IDs. I need a redacted version to share findings w…
Open the PDF you want to redact in Adobe Acrobat Pro.
Go to the Tools panel and select Redact a PDF.
Best practiceIf you do not see 'Redact a PDF,' click 'View more' to expand the list of tools.
Use your cursor to select the text or images you want to redact.
CautionRedacted content is permanently removed after applying redactions; double-check your selections.
Click Apply to permanently remove the selected content.
NoteYou may be prompted to save a copy of the document after applying redactions.
Save the redacted PDF with a new file name.
Best practiceSaving a new copy preserves your original unredacted document.
You can preview all redaction marks before applying them to ensure nothing is missed.
This runs in the Acrobat app - there is no separate API for this task.
Redaction only removes visible content. Sanitizing a PDF removes hidden data like metadata, layers, and revision history. If you don't sanitize, sensitive information might still be hidden in the file, even if it looks redacted. This step ensures all confidential data is gone.
| Method | Effect on Content | Security Level |
|---|---|---|
| Drawing a black rectangle | Covers content visually, but text is still present underneath and can be copied. | Low - data is easily recoverable. |
| Using 'Redact text and images' tool | Permanently removes the selected text or image data from the document. | High - data is truly gone after applying. |
For many instances of the same type of sensitive data, like SSNs or account numbers, use Acrobat's pattern-based auto-redaction feature. This tool can find and mark all occurrences automatically. After auto-redaction, have a second person review a random sample of the document to ensure all sensitive data was correctly removed and nothing was missed.
No, the redaction operation is not available through Adobe PDF Services API. Redaction is a feature exclusive to the Acrobat Pro desktop application. This means you cannot automate the permanent removal of sensitive data using programming interfaces.