Your documents never leave your device. Here is how to check.
We would rather you verify our privacy claim than trust it. This page explains what runs where, how to watch it yourself, and where the limits are.
What runs where
Everything that touches your document stays inside your browser tab.
Verify it yourself in two minutes
You do not need to be an engineer. Your browser already shows every network request a page makes.
- 01Open developer tools and the Network tabRight-click the page, choose Inspect, then open Network. Clear the list.
- 02Drop a PDF into the studioWatch the list while the document is scanned. You will see no request that carries the file.
- 03Turn on Offline modeSwitch it on in the studio, then disconnect from the internet. Scanning and review keep working.
- 04Check the page's security policyThe studio page restricts outbound connections to our own domain, so even a bug cannot send your file elsewhere.
What this protects, and what it cannot
An honest threat model is the most useful security page a tool can publish.
It protects against
- Your documents being stored or processed on our servers
- Text recoverable from under redaction boxes in the exported file
- Leftover metadata, annotations, hidden layers and attachments
- Redactions that silently failed, caught by the leak check
It does not protect against
- A compromised computer, malicious browser extensions or screen capture
- Sensitive data the detector missed. You review every finding before export
- Scanned pages have no text to find. Cover them by drawing boxes and check them by eye
- Information that is identifying only in context, such as a unique job title
What our servers do see
| Data | Seen by us |
|---|---|
| Your email and sign-in method | Yes |
| Plan, credit balance and billing records | Yes |
| That an export happened, and when | Yes |
| Page count of an exported document | [Decide before launch] |
| Document contents, text and file names | Never |
| What was redacted, or the entities found | Never |
What the verification report covers
After export, the tool re-opens the new file and tries to extract every redacted string. The report lists how many zones were applied, the categories, and a file hash. It never includes the redacted text itself.
A passing report means the checked strings could not be extracted. It does not prove the detector found everything that was sensitive.
A note on compliance
No software is certified HIPAA compliant, and SOC 2 describes a company, not an app. Airgap Redact is built so documents never leave your device, which can support your own compliance program.
Your organization remains responsible for how it uses the tool and for reviewing every redaction.