Blinded

Efficient redaction for your most sensitive documents, all done locally.

Redact a PDF before you paste it into ChatGPT or Claude

You want the model to summarise the contract, not to be told who the counterparty is. The obvious move -- redact it first -- runs into an obvious problem: most redaction tools upload the file to redact it, so the unredacted document has already gone somewhere before the model ever sees the safe version.

Open the tool Free, in your browser. Nothing is uploaded.

BeforeBefore redaction. AfterA deal slide before and after, with the removed names replaced by consistent labels rather than blank bars.
A deal slide before and after, with the removed names replaced by consistent labels rather than blank bars.

Redact first, in a tab that cannot send anything

This runs entirely in your browser. There is no server, and the page is prevented by the browser itself from sending anything anywhere. The unredacted document does not leave your machine, which is the whole point of redacting it.

What you then paste into a model is the exported file: pages rebuilt from pixels, with the removed words genuinely absent rather than covered.

Blank bars break the sentence. Labels do not

A contract with forty black bars in it is not a document a model can reason about: every party is the same nothing, and "the obligations of [blank] to [blank]" has lost the structure that made it a sentence.

Turn labels on and each removed thing carries a stable code -- [P1], [E2] -- with the same thing always getting the same label. The model can follow who owes what to whom, which clause refers back to which party, and which email address appeared twice, without any of them being identifiable.

Export with searchable text on, and the file arrives as text the model can actually read rather than a stack of pictures.

Check it before you paste it

Open the exported file and read it as the model will. Select across a bar and paste somewhere: nothing comes out, because the page was rebuilt rather than covered. Search it for one of the names you removed. Look at the filename, which is often the last place a name survives -- you can change it on export, and the name you type is checked against what you redacted.

Then read it for sense. If the labels have made a clause unreadable, you have removed something structural rather than something identifying, and it is better to find that out now than in an answer that quietly guessed.

None of this is advice about what your employer permits. It is the mechanics of making a file safe to send; whether it may be sent is a different question with a different answer at every company.

What to take out

Type the names you know. Tick the detectors for email addresses, phone numbers, web addresses and street addresses, which catch the identifiers nobody thinks to list. Pick out the letterhead and the signature, which are pictures and which no search will reach.

Every proposal is shown before anything is covered, with a count per page, so you decide what goes rather than discovering it afterwards.

How to do it, in four steps

  1. Open the document here first. Nothing is uploaded.
  2. Type the names, tick the detectors, and pick out any letterhead or signature.
  3. Turn on labels so the redacted document still reads as a document.
  4. Export with searchable text on, and give that file to the model.

Who it is for

Anybody using a model on work documents: lawyers summarising contracts, analysts pulling numbers out of a deck, support teams running tickets through a model, and anyone whose employer has a rule about what may be pasted where.

Open the tool

Questions

Why not just upload it and ask the model to ignore the names?

Because by then the document has been sent. Redaction is about what leaves your machine, and an instruction to a model is not a control over that.

Will the model still understand the document?

With labels on, yes. Each removed thing keeps a consistent code, so references between parties, clauses and addresses survive even though the identities do not.

Does the model get a picture or text?

Either. The export is a rebuilt page by default; turn on searchable text and the redacted pages are read back so the remaining words can be found and copied.

Is Blinded itself an AI service?

No. Nothing is sent to a model, and nothing is sent anywhere at all. The reading and matching run in your browser.

Also

Open the tool