What is redaction?

Redaction is the process of permanently removing or obscuring sensitive information in a document before it is shared, so that the protected content cannot be seen or recovered by whoever receives it.

What it actually means

Sometimes a document needs to be shared, but parts of it should not be. A contract shared with one party might contain another party’s confidential terms. A record produced in response to a request might contain personal information that must be protected. Redaction is how you share the document while withholding the sensitive parts, by removing that information rather than merely hiding it.

The word “permanently” is the important one. Real redaction removes the underlying content, so it is genuinely gone from the shared copy. This is different from drawing a black box over text in a way that still leaves the text underneath, a mistake that has embarrassed many organizations when recipients simply copied the hidden text out from beneath the box. Effective redaction means the protected information is not recoverable, not just visually covered.

Why it matters

Redaction sits at the intersection of two obligations that pull in opposite directions: the need to share or produce a document, and the duty to protect certain information within it, personal data, confidential terms, privileged content. Get it wrong in one direction and you withhold too much or refuse to share at all. Get it wrong in the other and you leak protected information, sometimes in a way that is discovered publicly.

For organizations handling donor information, confidential agreements, or records subject to disclosure requests, reliable redaction is what makes it possible to be transparent where required while still protecting what must stay protected.

Redaction and the original

A well-designed approach keeps the original document intact and creates a separate redacted copy for sharing, rather than destroying the source. That way the full document remains available to those authorized to see it, the redacted version is what goes out, and the difference between them is deliberate and recorded. Combined with a chain of custody, that keeps both the disclosure and the protection defensible.

Related terms: PII, audit trail, document version control. See how PaperlessZen™ handles secure external sharing of confidential documents.