Oddseal guide · PDF redaction basics
Why black-box redaction fails, and how to redact a PDF properly
A black box drawn over a PDF usually hides text only from the eye. The words are still in the file, so anyone can select, copy, search, or extract them. Proper redaction removes the content itself, then removes hidden information the page does not show. Test every redacted file before it leaves your team: select all and paste, search for the removed values, and extract the text with a second tool.
Oddseal editorial · Published September 28, 2026 · Updated September 28, 2026
Oddseal is responsible for this page. Third-party facts are linked to the sources below; product claims describe Oddseal as it works today. Report an error or suggest a correction.
Why a black box over a PDF is not redaction
A PDF page is a set of drawing instructions. Text is stored as characters with a font and a position, and a rectangle, highlight, or comment is another object drawn on top. Covering a rate with a black shape changes what the screen shows. It does not delete the characters underneath, which stay in the file for any reader, search box, or extraction tool.
Guidance written for security and disclosure teams treats cover-ups as ineffective. The U.S. National Security Agency’s redaction guide says black rectangles and black highlighting work for printed pages but not, in general, for computer documents, and that changing a font color to make text invisible does not work either: the item must be deleted. The UK Information Commissioner’s Office warns that information covered only by a shape, such as a black rectangle, remains in the electronic file.
Freight documents make the mistake expensive. A rate confirmation forwarded to a customer with a drawn box over the carrier buy rate still carries the buy rate, and with it your margin. A house bill of lading shared as a sample with the shipper’s name blacked out can still give up that name, and the supplier relationship behind it, to anyone who pastes the page into an email.
Common ways a “redacted” PDF still exposes information
Most failures are not exotic. They come from tools that change how a page looks without changing what the file contains.
Drawn rectangles and shapes
A box added with a drawing, comment, or markup tool sits on top of live text. Select-all and copy returns the words under it, and deleting the annotation shows them again.
Source: Redacting with Confidence: How to Safely Publish Sanitized Reports Converted From Word to PDF
Black highlighting and recolored text
Highlighting text in black, or turning the font the same color as the background, changes only its appearance. The characters stay searchable and copyable.
Source: How do we avoid an accidental breach when redacting information?
Hidden OCR text behind a scan
Scanned PDFs often carry an invisible OCR text layer behind the page image. Painting over the image leaves that layer, so search can still find the supplier name you covered.
Metadata, bookmarks, and attachments
Document properties, bookmarks, comments, form data, and embedded files can repeat a name or reference that no longer appears on the page.
Source: Primary source
Layers, cropped areas, and saved history
Hidden layers, content cropped out of view, and earlier saved versions can keep material inside the same file even when the visible page looks clean.
Masks that miss an edge
A box that stops short of a line can leave the tops of characters or a trailing digit readable in the page image itself, even when the text was truly removed.
How to test a redacted PDF before you send it
Test the exact file that will leave your team. Each check answers a different question, so run all of them.
- 01
Open the saved output, not your working file
A preview or an unsaved window can differ from what you send. A re-export or a later edit needs its own test.
- 02
Select all, copy, and paste
Select all text on each page, copy it, and paste it into a plain-text editor. If a removed rate, name, or account number appears, the redaction failed. The NSA guide recommends selecting and copying section by section for this reason.
- 03
Search for every removed value
Use the viewer’s search for each value you meant to remove, including partial forms such as the last digits of an account or a shortened company name. Any hit means the text is still present.
- 04
Extract the text with a second tool
Open the file in a different viewer or run a text-extraction tool. Different readers expose different layers, so one clean result is not enough.
- 05
Look for hidden information
Check document properties, bookmarks, comments, attachments, form fields, and layers. In Acrobat Pro, the Sanitize and Remove Hidden Information tools list and remove these items.
- 06
Inspect the page image at full size
Zoom in on every mask and look for edges, partial characters, logos, and repeats elsewhere on the page. Confirm that the fields your recipient needs are still readable.
How to redact a PDF properly
Real redaction removes content from the file rather than covering it. Dedicated tools do this in two parts: they delete the text and graphics inside each marked area, and they remove hidden information such as metadata, comments, attachments, and hidden text that the page does not display. Adobe notes that its redaction removes only visible text and graphics, and that hidden data must be sanitized separately.
Work on a copy. Keep the original record unchanged and save the redacted output under a new name, so it can never replace the business document you are required to keep.
Decide what to remove by recipient before you touch the page. A carrier needs the rate it agreed to; a customer may not need the carrier’s buy rate. Redaction tools remove what you select. They do not know which fields your recipient is entitled to see.
Why an image-only rebuild avoids the hidden-layer problem
Another approach is to keep none of the source file’s structure. The ICO describes exporting redacted material to a simple image format that does not support layers or edit history. When every page becomes a flat image with the masks burned into the pixels, there is no text under a mask to copy, no OCR layer to search, and no metadata, attachments, or layers carried over from the source.
This is how Oddseal builds every redacted copy. Detection suggests likely fields, a person reviews every selection, keeps anything the recipient needs, and draws boxes for anything detection missed. Oddseal renders each page to a fresh 240-DPI image with the approved masks burned into the pixels and assembles a brand-new PDF with one JPEG per page. The output carries no text layer, fonts, hidden text, source metadata, attachments, annotations, JavaScript, optional-content layers, or edit history from the source. Before anyone can download or share it, an independent reader opens the stored file and confirms the expected page count, no extractable text, and no attachments, JavaScript, or open action, alongside a structural check of the file. If that check fails, download and sharing stay locked.
Two freight examples
A rate confirmation sent to a customer
Select the carrier name, MC number, buy rate, and remittance account. Keep the lane, equipment, pickup window, and the terms the customer approved. Before it leaves your team, copy-paste and search the output for the buy rate.
A house B/L used as a sample
Select the shipper, consignee, HBL number, and freight amount. Keep the vessel, voyage, ports, cargo, and weight if the reviewer needs them. Remaining references can still identify the shipment, and the sample never replaces the operative bill.
Sources and evidence
These public sources describe why cover-ups fail and how to check redacted electronic documents. Older guidance predates current PDF tools, but the underlying file behavior is unchanged.
U.S. National Security Agency (archived DTIC copy)
Redacting with Confidence: How to Safely Publish Sanitized Reports Converted From Word to PDF
2006 guidance explaining that black boxes, black highlighting, and font-color changes do not redact computer documents, and recommending select-and-copy checks.
Information Commissioner's Office
How do we avoid an accidental breach when redacting information?
Warns that text covered only by a shape or recolored remains in the file, and describes exporting to image formats without layers or edit history.
U.S. Bankruptcy Court, Southern District of West Virginia
Redaction of Confidential Information in Electronic Documents
Court-hosted technical note explaining that black rectangles and highlighting are not appropriate for electronic documents because the text can be extracted.
U.S. Department of Homeland Security
Redacting Sensitive Information (memorandum)
Adopts the NSA guidance and requires an independent quality-control check of redacted material.
Adobe
Redaction and sanitization in Acrobat
States that Acrobat redaction removes only visible text and graphics and that hidden data must be sanitized separately.
Related reading
Check a redacted freight PDF
Test a synthetic redacted invoice yourself and read what each check covers.
Adobe Acrobat redaction vs Oddseal
When Acrobat Pro is the better tool, and when a freight-specific flow fits.
Redact a rate confirmation
Protect the buy rate without removing what the contracted carrier needs.
Freight document redaction guide
Choose fields by recipient before you mark a page.
Start on Oddseal’s Free plan: 5 documents a month, no card needed.