InRedactr v0.0.2

InRedactr v0.0.2

New

• InRedactr is now part of InCyberField, a suite of security and privacy
  tools. The suite is named in Settings > About and at the top of the Terms and
  Conditions, and the licence clause now makes clear that the terms cover
  InRedactr only, and that each InCyberField tool comes with its own.
  If you have already accepted the terms you will not be asked again. Naming the
  suite changes nothing you agreed to.

Fixed

• The mapping is now cleared when you redact from Explorer. Right-clicking a
  file or folder and choosing "Redact with InRedactr" ran the redaction and then
  closed without clearing the stored mapping of original values, which every
  other way of closing the app does. The Terms say that mapping is cleared when
  the application closes, and on that one path it was not. It is now.

• The scroll wheel works everywhere in Settings. Moving the pointer around a
  Settings page could stop the wheel responding until you moved off the page and
  back, and with more than one scrolling panel open the wheel sometimes scrolled
  a panel the pointer was nowhere near. The wheel now always scrolls whatever is
  under the pointer.

• Dialogs open on the right monitor. If the InRedactr window was on a second
  screen, dialogs, prompts and confirmations opened on the main screen instead of
  over the window they belonged to. They now open over InRedactr, on whichever
  monitor it is on.

• Tooltips no longer get cut off at the edge of the screen.

• Closing the app no longer leaves the process running. On shutdown InRedactr
  now exits outright rather than waiting on background work that can refuse to
  stop, which is what occasionally left a window gone from the screen but the
  program still running.

Documentation

• The README described a "Send to AI" button that has never existed in the
  application. The claim has been removed. Everything else in it was checked
  against the code and is accurate.

Under the hood

• Updated to the current PyMuPDF interface, so PDF reading and true PDF redaction
  keep working with future versions of it.
• The test suite now states which copy of the code it is testing, and runs
  against a temporary sandbox instead of your real settings folder.

---

Requirements: Windows 10 or 11, 64-bit. Nothing else to install.

Some antivirus and EDR products block the .exe because the installer is not
signed by a certificate authority. If that happens, download the .zip instead.

InRedactr v0.0.1

How it works

Three steps, and the third is the one other tools stop short of.

1. Paste. Text, a file, or press Ctrl+Alt+R to redact whatever is on your
clipboard without even opening the window. Word, PDF, Excel, email and
screenshots all work.

2. Review. Everything found is colour-coded in the document and listed
underneath. Hover to see why it was detected, click to keep a false positive, or
change how any single item is replaced.

3. Restore. Paste the AI's reply back in and your real names return. The
mapping is encrypted, stays on your machine, and expires on a timer you set.

---

Features

Detection

Five passes run over every document, because no single method finds everything.

• Validated formats. 116 detectors, and the ones with a checksum are
  arithmetically verified rather than pattern-matched, so an invoice number is
  not reported as a Tax File Number. Covers TFN, ABN, ACN, Medicare, NHS, NINO,
  SSN, ABA routing, IBAN, Canadian SIN, Aadhaar, Indian PAN, NZ IRD and NHI,
  Singapore NRIC, IMEI, VIN, payment cards and Bitcoin addresses.
• Context. A bare nine-digit number is only a tax file number if something
  nearby says so. A date beside a birth label is retyped as a date of birth and
  treated as more sensitive than an ordinary date.
• Names it has never seen. A statistical model finds people, organisations
  and places that appear in no list, and gazetteers of given names, surnames and
  places back it up.
• Structure. JSON, XML, YAML and CSV are read by key name, email headers and
  signature blocks are treated as dense regions, and CSV columns vote on their
  own type.
• Quasi-identifiers. It warns when a role, a location and a date together
  could still single out one person after every name has gone.

It also looks where identifiers hide: inside base64, hex, URL-encoded,
quoted-printable and gzip blobs, including nested ones. Cyrillic and Greek
lookalikes, zero-width characters, spaced-out digits and defanged notation are
all normalised first, so obfuscation does not slip past.

Nine ways to replace something

Set them per type, or per individual finding.

Strategy	What you get
Tag	[PERSON_1]. Reversible, and the AI can still follow who is who
Surrogate	A realistic fake name, so the text still reads naturally
Mask	Blocks
Partial	Keeps the last few characters
Format-preserving	A different number of the same shape
Hash	A stable fingerprint
Generalise	An age becomes a band, a suburb becomes a state
Date shift	Every date moves by one document-wide offset
Delete	Removed entirely

Date shifting rounds to whole weeks, so intervals and weekdays survive but
absolute dates do not. Surrogates are deterministic per install: the same name
always maps to the same replacement here, and to a different one on any other
machine. Credentials never get a realistic surrogate, whatever the setting.

Verification

Redacting is easy to get quietly wrong, so the result is checked rather than
assumed.

• The output is re-scanned from scratch, as though it were a new document
• Any original value still present blocks the copy outright
• Accepting a finding removes every occurrence of that value, not only the
  ones the detectors happened to report
• A warning before you copy text that still has high-confidence findings in it

Putting the names back

• Encrypted vault, tied to your Windows account, expiring on a timer
• Handles a reworded reply: tokens in bold, tokens with spaces, tokens with the
  brackets stripped, surrogate values and shifted dates
• Anything it cannot place is reported rather than silently left in
• Passphrase-protected export and import, so a round trip can cross machines
• One-way mode never creates a vault at all

Rules and profiles

Twelve profiles: Maximum (public AI), Balanced, Natural prose, Research and
analytics, Technical (secrets only), Credentials only, GDPR, HIPAA Safe Harbor,
PCI-DSS, AU Privacy Act, Legal, and HR and recruitment.

On top of those, an always-redact list, a never-redact list and custom regular
expressions with a live tester. The always-redact list is stored encrypted,
because a list naming your clients is itself a client list, and it is left out
of shared rule packs by default.

Files

Reads .txt .md .log .csv .tsv .json .xml .yaml .html .ini
.rtf .docx .odt .pdf .xlsx .eml .msg .vcf .ics, source code in
a dozen languages, and images through the OCR engine built into Windows.

• True PDF redaction. The text is removed from the file, not covered with a
  black rectangle. Select and copy from a redacted page and there is nothing
  there.
• Metadata scrubbing on save: Word author and revision history, PDF XMP,
  image EXIF
• Batch mode over a whole folder, sharing one vault so tokens stay
  consistent across every output file, with a CSV report

Audit

A local log of what was done: counts, settings and outcomes, never the values.
Rows are hash-chained, so a deleted or edited entry shows up. Exports to CSV or
JSON, with a retention period you set.

Windows integration

• Global hotkey, Ctrl+Alt+R by default, redacts the clipboard in place
• Tray icon with quick actions
• Right-click a file or folder in Explorer to redact it
• An estimate of how much of an AI's context window the redacted text will use

---

Privacy

Your documents never leave this machine. There is no cloud service behind this
app, no account and no telemetry.

The one exception is a check for a newer version, which asks GitHub whether a
release exists and nothing else. It carries no document text, no identifiers and
no usage data, and switching it off in Settings means nothing is ever contacted.
Everything else, including the name detection, runs in the app itself.

Send to AI opens your browser at the assistant you chose with the redacted
text on the clipboard. Opening a browser is something Windows does, not
something InRedactr sends.

Settings, rules and the vault are encrypted with a key only your Windows account
can unseal, and live in %LOCALAPPDATA%\InRedactr. Working files go there too,
never to the system temporary directory. The vault is cleared and overwritten on
exit rather than simply deleted.

There is a self-test built in, so you can confirm the tool works on a sample
document without pasting anything real into it to find out.

---

Built with

spaCy for name detection,
PyMuPDF for PDF reading and true
redaction, Pillow for images, Tkinter for the
interface, and the OCR engine built into Windows. Packaged with
Inno Setup.

---

Author

Fady Azzi

Copyright © 2026 Fady Azzi. All rights reserved.

NOTE:

Some Anti-Viruses or EDRs might block the download of the exe file due to the packaging and not having an Signed Authority certificate. You can Download the zip file as a workaround.

Please download the latest exe or zip version from the right side section "Releases", or use below direct links.

Direct link to the exe is:
https://github.com/FadyAzzi/InRedactr/releases/latest/download/InRedactrInstaller.exe

Direct link to the zip is:
https://github.com/FadyAzzi/InRedactr/releases/latest/download/InRedactrInstaller.zip