GDPR / DSAR redaction

Redact third-party data before answering a subject access request

When someone makes a data subject access request, you normally have one month to send them their personal data, but not other people's. RedactSnap helps you strip third-party names, emails and phone numbers out of PDFs before disclosure, without sending the documents to another processor.

Drop a PDF here, or click to choose

PDF, PNG or JPG

Opens in your browser. The file is never uploaded.

What usually needs removing from a DSAR bundle

Other people's names

Colleagues, customers and family members mentioned in emails and reports. These are flagged by the local NER model.

Third-party contact details

Email addresses and phone numbers are detected across every page.

Organisations and locations

Flagged for review where they could identify someone else.

Internal references

Ticket numbers, case IDs or employee IDs can be added as custom terms.

Preparing a DSAR response

  1. 1

    Export the relevant emails and documents to PDF.

  2. 2

    Open each PDF in RedactSnap and run Smart Scan.

  3. 3

    Keep the requester's own data visible and accept the redactions for third parties.

  4. 4

    Export the flattened files and keep a note of what you withheld and why.

No extra processor in the chain

Uploading DSAR material to an online tool makes that vendor a processor of the personal data inside it, which brings Article 28 obligations and a data processing agreement. Because RedactSnap runs in your browser and never receives the documents, it does not take part in that processing.

Redaction is a judgement call

GDPR lets you withhold third-party data unless they consent or it is reasonable to disclose without consent. That decision is yours. RedactSnap finds candidate data quickly so your time goes on the judgement rather than on hunting for names on page 47.

Frequently asked questions

How long do I have to respond to a DSAR?

Under the UK and EU GDPR, generally one month from receipt, extendable by up to two further months for complex or numerous requests. Check the latest guidance from your supervisory authority.

Can I redact emails exported as PDF?

Yes. Print or export the email thread to PDF, then open it in RedactSnap. Email-generated PDFs have a text layer, so Smart Scan works well on them.

Is my file uploaded anywhere?

No. RedactSnap reads the PDF with your browser's File API and processes it in memory on your device. There is no upload endpoint and no server-side copy of your document. You can confirm this by opening your browser's network tab while you redact.

Is the redaction permanent or just a black box on top?

Permanent. A black rectangle drawn in an ordinary PDF editor can be copied around or deleted, leaving the text underneath readable. RedactSnap exports every page as a flattened image, so the original text layer, fonts and hidden objects are not carried into the file you download.

Related guides