How to verify that a redaction is complete
Leave feedback
On this page
A redaction you have not verified is a claim, not a control. Verification costs a few calls and is the difference between “the tool ran” and “the data is gone”.
Note
The commands and config snippets on this page are for the .NET build of the server — the only platform available today. Installation and client setup: MCP server for .NET. Other platforms will expose the same tools with their own launch command; everything else on this page applies unchanged.
1. Re-run the pattern on the redacted copy
Run the same email pattern against case-file_redacted.pdf and tell me the match count.
Expect zero. A non-zero count means the pattern missed variants — a different separator, a line break, a different case — or the run hit the evaluation cap.
2. Check the other three places
Now check the redacted copy for annotations and read its document properties.
redact_annotations and erase_metadata applied in the pass do not prove they were applied to this file — the chaining rule means it is entirely possible to verify a document that skipped a step. Check the file you are about to release, not the one you think you produced.
For a deeper metadata check across every package, the GroupDocs.Metadata MCP server reads EXIF, XMP, and IPTC as well.
3. Look at the pages
Area redactions cannot be verified by pattern. Open the document, or have the agent render the affected pages, and confirm each box covers what it was meant to cover — completely, on the right page.
4. Confirm the licence state of the run that produced it
What is the license status of the redaction server?
If the answer is evaluation, the redaction was capped at four replacements and the verification above will usually show it — but a document with exactly four matches would pass and still be wrong. Licence first, verify second; both, every time. Licensing.
Keep the evidence
The verification transcript — patterns used, match counts, files produced, the final zero-match result — is the record that shows the redaction was performed and checked. Ask the agent for it as a summary and keep it with the case file:
Summarize what you redacted, in which file, with what counts, and what the verification found.
What verification cannot tell you
It cannot tell you whether your patterns were the right ones. Everything above proves that what you asked to be removed is gone. Deciding what should be removed is your judgement, and it remains the part of redaction that no tool takes off your hands.
Was this page helpful?
Any additional feedback you'd like to share with us?
Please tell us how we can improve this page.
Thank you for your feedback!
We value your opinion. Your feedback will help us improve our documentation.