Adobe Acrobat Pro is the industry standard for PDF redaction. Law firms use it for discovery documents. Healthcare organizations use it for medical records. Government agencies use it for FOIA responses. When done correctly, Acrobat's redaction permanently removes sensitive information from PDF files.
When done incorrectly, it leaves data recoverable. The difference between secure redaction and a data breach often comes down to a few clicks.
The short version: If you need to redact sensitive documents before they reach AI systems, PaperVeil handles that layer. The rest of this article explains where it fits in the broader governance architecture.
Before You Start: Redaction vs. Covering Up
The most common PDF redaction mistake: drawing black boxes over sensitive text and thinking it's redacted. It's not. That text is still in the PDF, searchable and extractable. Anyone with a PDF reader can select the "redacted" area and copy the text underneath.
True redaction permanently removes content from the file. Adobe Acrobat's Redact tool does this. Drawing shapes, adding black rectangles, or using the highlighter tool in black does not.
If you've been using black boxes to "redact" PDFs, those documents are not secure. The underlying text remains in the file.
What You'll Need
Adobe Acrobat Pro DC or Acrobat Pro 2020. The redaction tools are only available in Acrobat Pro. They're not in the free Acrobat Reader or Acrobat Standard.
Subscription options:
- Acrobat Pro DC: $22.99/month (annual) or $29.99/month (monthly)
- Acrobat Pro 2020: One-time purchase, but missing some newer features
If you're using Acrobat Reader or a non-Adobe PDF viewer, you cannot properly redact PDFs with that software.
Step-by-Step: Redacting Text in Adobe Acrobat
Step 1: Open the PDF and Access Redaction Tools
Open your PDF in Acrobat Pro. Go to Tools > Redact. Alternatively, you can search for "Redact" in the Tools search bar.
This opens the Redact toolbar at the top of your document.
Step 2: Mark Content for Redaction
You have several options for marking content:
Mark for Redaction (Text Selection)
- Click "Mark for Redaction" in the toolbar
- Click and drag to select text you want to redact
- Selected text gets a red overlay indicating it's marked
Find and Redact (Pattern-Based)
- Click "Mark for Redaction" dropdown > "Find Text"
- Enter a word, phrase, or pattern to search for
- Acrobat finds all instances across the document
- Review and check the items you want to redact
- Click "Mark Checked Results for Redaction"
This is particularly useful for redacting:
- Names that appear multiple times
- Social Security numbers matching a pattern
- Email addresses
- Phone numbers
Redact Pages
- Click "Mark for Redaction" dropdown > "Redact Pages"
- Select page range to remove entirely
- Entire pages will be removed from the document
Step 3: Review Marked Content
Before applying redaction, review all marked areas:
- Scroll through the document checking each red overlay
- Verify you've marked everything that needs redaction
- Verify you haven't marked content that should remain
Tip: Click "Mark for Redaction" dropdown > "Show Redaction Properties" to see a list of all marked items.
Step 4: Apply Redactions
This is the critical step that actually removes the content:
- Click "Apply" in the Redact toolbar
- Acrobat warns that redaction is permanent and cannot be undone
- Click "OK" to confirm
After applying, the marked areas become black boxes (or your chosen appearance) and the underlying content is permanently deleted from the file.
Step 5: Remove Hidden Information
Even after redacting visible content, PDFs can contain hidden data:
-
Go to Tools > Redact > Remove Hidden Information
-
Or click "Remove Hidden Information" in the Redact toolbar
-
Acrobat scans for hidden data including:
- Metadata (author, creation date, software)
- Embedded files and attachments
- JavaScript
- Hidden text layers
- Comments and annotations
- Form field data
- Deleted content
- Hidden layers
-
Review the found items
-
Click "Remove" to delete hidden information
This step is essential for complete sanitization. Many data exposures come from metadata left in "redacted" documents.
Step 6: Save with a New Filename
Save the redacted document with a new filename:
- Go to File > Save As
- Choose a new filename (e.g., "Document_REDACTED.pdf")
- Never overwrite the original file
Keep the unredacted original in a secure location in case you need to reference it or create a differently redacted version.
Advanced Redaction Options
Customizing Redaction Appearance
By default, redacted areas appear as black boxes. You can customize this:
- Before marking, click "Redaction Properties" in the toolbar
- Or right-click a marked area and select "Properties"
Options include:
- Fill color: Black, white, red, or custom color
- Overlay text: Add text like "REDACTED" or "[CONFIDENTIAL]" over the redacted area
- Font and size: Customize overlay text appearance
For legal documents, black with no overlay text is standard. Some organizations prefer visible "REDACTED" labels for transparency.
Creating Redaction Codes
For recurring redaction needs, create redaction codes:
- Go to Edit > Preferences > Documents
- Click "Redaction" in the left panel
- Under "Redaction Codes," add codes and descriptions
Example codes:
- "PII" - Personal Identifying Information
- "HIPAA" - Protected Health Information
- "ATTY-CLIENT" - Attorney-Client Privilege
When marking content, you can assign codes to explain why information was redacted.
Batch Redaction (Action Wizard)
For processing multiple documents:
- Go to Tools > Action Wizard
- Create a new action including redaction steps
- Apply the action to a folder of PDFs
This is useful for:
- Redacting the same patterns across many documents
- Standardizing redaction procedures for a team
- Processing large document sets for discovery
Common Mistakes to Avoid
Mistake 1: Not Clicking "Apply"
Marking content for redaction doesn't remove it. You must click "Apply" to permanently delete the content. Until then, the marked areas are still searchable and extractable.
Mistake 2: Using Shapes Instead of Redaction Tool
Drawing black rectangles or using annotation tools doesn't redact. The text underneath remains in the file. Always use the dedicated Redact tool.
Mistake 3: Forgetting Hidden Information
Even after redacting visible content, documents contain metadata, comments, and hidden layers. Always run "Remove Hidden Information" before sharing redacted documents.
Mistake 4: Not Checking the Entire Document
Review every page. It's easy to miss sensitive information on pages you scrolled past quickly. For long documents, use Find and Redact to search for common sensitive patterns.
Mistake 5: Overwriting the Original
Always save redacted documents with a new filename. Once redaction is applied, it cannot be undone. Losing the original means losing access to that information permanently.
Mistake 6: Not Verifying Redaction
After applying redaction:
- Try selecting the "redacted" text. You shouldn't be able to.
- Search for terms you redacted. They shouldn't appear.
- Check document properties for lingering metadata.
Mistake 7: Flattening Instead of Redacting
"Flattening" a PDF merges annotations with the content but doesn't remove underlying text. Flattened black boxes can still have recoverable text beneath them. Use actual redaction tools.
Testing Your Redaction
After completing redaction, verify it worked:
Text Selection Test
- Open the redacted PDF
- Try to select text in redacted areas
- If you can select or copy text, redaction failed
Search Test
- Press Ctrl+F (Cmd+F on Mac)
- Search for terms you redacted
- They should return zero results
Metadata Test
- Go to File > Properties
- Check Description, Custom, and Advanced tabs
- Sensitive metadata should be removed
Extract Test (Advanced)
- Open the PDF in a text editor
- Search for strings that should be redacted
- If found in the raw file, redaction failed
Industry-Specific Considerations
Legal Discovery
For legal discovery:
- Use redaction codes to explain withholding basis
- Maintain privilege logs corresponding to redactions
- Keep original unredacted versions under secure hold
- Consider Bates numbering before redaction
Healthcare (HIPAA)
For medical records:
- Remove all 18 HIPAA identifiers
- Pay attention to notes fields containing narrative PHI
- Remove metadata that might identify creating clinician
- Consider full page removal for highly sensitive sections
Government (FOIA)
For FOIA responses:
- Apply exemption codes as overlay text
- Document exemption basis for each redaction
- Maintain segregability review documentation
- Consider Vaughn index requirements
Financial Services
For financial documents:
- Redact account numbers completely (not just partial masking)
- Remove SSNs, even if only last 4 digits should be visible
- Check form fields for auto-filled sensitive data
- Remove digital signature metadata if applicable
Alternatives to Adobe Acrobat
Adobe Acrobat Pro is the gold standard, but alternatives exist:
Foxit PDF Editor Pro: Similar redaction capabilities at lower cost. Good for organizations not committed to Adobe ecosystem.
Nitro Pro: Business-focused PDF editor with redaction tools. Popular in corporate environments.
PDF-XChange Editor: Powerful editor with redaction features. Popular with individual professionals.
Government-Specific Tools: Some agencies use specialized tools like Adobe Acrobat Government Edition or purpose-built redaction software.
For any tool, verify that:
- It offers true redaction (content removal), not just visual covering
- It removes hidden information and metadata
- It produces standard PDF output viewable in any reader
When Redaction Isn't Enough
Some scenarios require more than standard redaction:
Scanned Documents: If your PDF is a scanned image, standard text redaction won't work. You need to redact the image itself. Consider OCR to convert to text-based PDF first.
Complex Forms: PDFs with complex form fields, JavaScript, or interactive elements may retain data in unexpected places. Extra verification is needed.
Embedded Files: PDFs can contain embedded files (spreadsheets, other PDFs). These need separate redaction or complete removal.
Large Document Sets: Manual redaction doesn't scale. Consider automated redaction tools for discovery or FOIA processing involving thousands of documents.
Establishing Redaction Procedures
For organizations handling sensitive documents regularly:
-
Document your process. Create written procedures for redaction including verification steps.
-
Train staff. Ensure everyone handling redaction understands the difference between covering and redacting.
-
Implement review. Have a second person verify redaction before documents leave the organization.
-
Test periodically. Randomly sample redacted documents to verify redaction effectiveness.
-
Log redaction activities. Maintain records of who redacted what, when, for compliance documentation.
Summary
Adobe Acrobat Pro provides robust PDF redaction when used correctly:
- Use the dedicated Redact tool, not shapes or annotations
- Mark content for redaction (it's not removed yet)
- Click Apply to permanently remove marked content
- Run Remove Hidden Information to sanitize metadata
- Save with new filename to preserve the original
- Verify redaction through selection, search, and metadata tests
The most common failures come from not applying redaction, using annotation tools instead of redaction tools, or forgetting to remove hidden information. Following proper procedure transforms a potential data exposure into a securely sanitized document.
PaperVeil lets you redact all your sensitive information from PDFs in a simple drag and drop flow. Detect and remove PII, match custom patterns, strip metadata, and generate audit trails. The redaction layer that makes AI document processing actually safe.