Medical record redaction
Redact PHI from medical records without uploading them
Sharing records with researchers, insurers, attorneys or a second-opinion clinic often means removing protected health information first. Most online redaction tools need you to upload the file. RedactSnap does all of the processing on the workstation in front of you.
Drop a PDF here, or click to choose
PDF, PNG or JPG
Opens in your browser. The file is never uploaded.
PHI that Smart Scan helps you find
Patient and provider names
Flagged by a named-entity model that runs locally in your browser.
Locations and organisations
Addresses, cities and facility names are flagged for review.
Phone numbers, emails, SSNs
Detected with pattern matching on every page.
MRNs, dates and plan numbers
Add your facility's MRN format or specific dates as custom terms, or box them by hand.
A redaction workflow for medical PDFs
- 1
Open the record locally in the tool above.
- 2
Run Smart Scan, then add custom terms for identifiers specific to your organisation, such as MRN prefixes.
- 3
Go through each page and box anything the scan did not catch, including handwriting and scanned pages.
- 4
Export and check the verification view before you send the file.
Why local processing matters for PHI
When you upload PHI to a cloud service, that vendor normally needs to be covered by a Business Associate Agreement. Because RedactSnap processes files in the browser and never receives them, the document is not transmitted to us at any point.
Your organisation is still responsible for its own HIPAA compliance, including deciding what counts as adequately de-identified. RedactSnap is a tool that helps with that work. It does not certify compliance.
Safe Harbor identifiers take a human review
The HIPAA Safe Harbor method lists 18 types of identifiers, including dates, geographic subdivisions and device serial numbers. Automated detection speeds this up, but no scanner catches every identifier in free-text clinical notes. Plan for a manual review pass.
Frequently asked questions
Is RedactSnap HIPAA compliant?
HIPAA compliance applies to organisations and their processes, not to a standalone tool. What RedactSnap does is keep the document on your device. We never receive, store or transmit your PHI, which keeps us out of the data flow. Check your workflow with your privacy or compliance officer.
Does it work on scanned medical records?
You can open and redact scanned pages, but automatic detection needs a text layer. On scanned pages, draw boxes manually.
Is my file uploaded anywhere?
No. RedactSnap reads the PDF with your browser's File API and processes it in memory on your device. There is no upload endpoint and no server-side copy of your document. You can confirm this by opening your browser's network tab while you redact.
Is the redaction permanent or just a black box on top?
Permanent. A black rectangle drawn in an ordinary PDF editor can be copied around or deleted, leaving the text underneath readable. RedactSnap exports every page as a flattened image, so the original text layer, fonts and hidden objects are not carried into the file you download.