Share proof, not personal data.
Auditors need evidence. Privacy law limits what you can show them. Redact lets you hide individual fields in a shared copy while the reviewer can still confirm nothing was changed.
Two obligations that normally collide.
Regulations increasingly require organizations to keep unalterable records of automated decisions. Data protection laws require minimizing, and sometimes erasing, personal data. Ordinary logs force you to choose.
Keep records
Retain complete, unaltered evidence of what AI systems did.
Protect people
Show only what each reviewer is entitled to see.
Hide fields. The seal still verifies.
Prepare an auditor copy by hiding sensitive fields. Then edit a visible value to see tampering detected.
Live redaction demo: hide fields, keep the seal
Press Hide on sensitive fields to prepare an auditor copy. Then try editing a visible value.
Every field gets its own fingerprint.
When evidence is sealed, each field is fingerprinted separately with a random salt, and the fingerprints combine into the seal. A hidden field is replaced by its fingerprint, so the seal can still be recomputed and checked without revealing the value.
- Field-level redaction profiles per audience and jurisdiction
- Hidden values cannot be recovered from the shared copy
- Visible fields remain fully tamper-evident
- Original producer signatures remain valid
Supports, does not replace, your privacy programme. Redact is a technical control that helps reconcile record-keeping with data minimization and erasure requests. How it applies to a given legal obligation remains a decision for your privacy and legal teams.
Next
Hand the redacted copy to anyone. Verify lets them check it offline.
Frequently asked questions
How does Attestorian Redact hide personal data without breaking the cryptographic seal?
When an evidence package is sealed, each individual field receives a unique cryptographic salt and SHA-256 fingerprint that roll up into the signed root digest. During redaction, sensitive fields like customer names or account numbers are replaced by their fingerprint, allowing offline verifiers to recompute and validate the exact root signature.
Can hidden values be recovered from a redacted Attestorian evidence package?
No. Hidden field plaintext and salt values are completely stripped from the shared auditor copy, leaving only the irreversible cryptographic digest. External reviewers cannot brute-force or reconstruct redacted PII, while all remaining visible fields stay 100% tamper-evident.
Verify redacted evidence for yourself.
Test selective redaction workflows against your privacy and audit requirements. The USD 10,000 pilot fee is credited in full toward your annual license.
Last updated: