OnlineRedactor

Data processing

Phase 1 does not offer a signed DPA, BAA, or enterprise compliance pack. The app is intentionally limited to browser-side PDF processing with public AGPL source while paid checkout remains paused.

Document processing

Uploaded PDFs, filenames, extracted text, redaction targets, and output files are processed locally in your browser and are not sent to OnlineRedactor servers.

Account processing

Account and billing systems are not active in Phase 1. If those are added later, they must remain content-free and must not store PDF bytes or redaction text.