Security Architecture

Traditional online PDF tools upload your document to a remote server to process it. This introduces multiple points of failure: transmission interception, server logs, and potential data retention breaches.

RedactSnap operates differently. We utilize the HTML5 FileReader API and WebAssembly (via PDF.js) to load and render your documents strictly within your browser's memory.

• No HTTP POST requests containing file data are ever made.
• Your document never touches our infrastructure.
• We cannot see, read, or recover your files.

A common failure in redaction is "masking" vs. "redacting". Masking simply places a black rectangle object over text. The underlying text remains in the file and can be recovered by simply deleting the rectangle.

RedactSnap implements Secure Rasterization (what we call the Black Hole Protocol) for exports:

1. The page content and your redactions are rendered to a high-resolution Canvas (300 DPI equivalent).
2. This canvas is converted to a flat bitmap image (JPEG/PNG), physically destroying vector text data.
3. The flat image is re-embedded into a new PDF container.

This ensures that the information under the redaction is not just hidden, but mathematically non-existent in the output file.

We use open-source libraries like pdf.js and pdf-lib to handle document manipulation. Our client-side code is minified for performance but not obfuscated for logic hiding. You can inspect network traffic in your browser's Developer Tools to verify that no file data is leaving your network.