Yes. The short version: the file is processed on hardware we own, never a third-party cloud, and you get a report proving what was found — not just our word that it was handled.
The usual choice firms get stuck with
Redact it by hand, page by page, which doesn't scale past a few dozen documents. Or upload it to a cloud redaction tool, which means a privileged or personal-data document now sits on somebody else's servers before you've even found out what's in it.
Neither is really a choice. One costs too much time, the other costs the thing you were trying to protect.
What actually happens to the file
Your files are encrypted in your browser before they're sent, each with its own key only our machine can unwrap, so nothing readable crosses the internet. The job then runs on hardware we own, in an isolated workspace, encrypted at rest. No human reviews file content — the work is checked by software. In the rare case a job needs manual attention (a stuck batch, a file type the system doesn't recognize), an operator may see metadata like a file's name or type, never its content.
The machine that does the work has one cable, running to the other one — every other route out is blocked, and that's checked continuously, not asserted once in a policy document.
What you get back to check it
Known personal-data patterns are found and redacted automatically, and you get the detection report alongside the result — what was caught, named, not just a claim that something was. Every job also comes back with a completion report (what was and wasn't processed, and why) and a destruction certificate carrying the SHA-256 of the exact file you received. Run that hash yourself: if it matches, you're holding precisely what the certificate describes. The hash proves the file is genuine — deletion itself is what the certificate and job record state, not something the hash alone can show you.
Where this breaks down — said plainly
- It's not legal advice. Pattern-based detection finds known forms of personal data; it doesn't make a privilege call for you.
- Review anything that matters. Automated extraction is fast and it is not infallible — that's true of any tool, including this one.
- Not a HIPAA setup. We are not a HIPAA business associate by default; a separate agreement comes first if that's what you need.
Related guides
- Remove hidden metadata from a Word document
- How file encryption during upload actually works
- Is it safe to use AI on privileged documents?
Where this fits on the site: this is the Privacy Sanitization and Confidential Document Cleanup services under Document PII detection & redaction pricing — published tiers starting at $299 for up to 500 pages, no quote, no sales call. See Services & Pricing or go straight to Choose your job.