Data processing

OnlineRedactor does not currently offer a signed DPA, BAA, or enterprise compliance pack. PDF processing stays browser-side with public AGPL source while paid checkout remains disabled by default.

Document processing

Uploaded PDFs, filenames, extracted text, redaction targets, and output files are processed locally in your browser and are not sent to OnlineRedactor servers.

Account processing

Account and billing systems are limited to login, plan, subscription, waitlist, and content-free usage metadata. They do not store PDF bytes, filenames, redaction text, or coordinates.