Platform/Redact
Redact

Share proof, not personal data.

Auditors need evidence. Privacy law limits what you can show them. Redact lets you hide individual fields in a shared copy while the reviewer can still confirm nothing was changed.

The problem

Two obligations that normally collide.

Regulations increasingly require organizations to keep unalterable records of automated decisions. Data protection laws require minimizing, and sometimes erasing, personal data. Ordinary logs force you to choose.

Keep records

Retain complete, unaltered evidence of what AI systems did.

Protect people

Show only what each reviewer is entitled to see.

Try it

Hide fields. The seal still verifies.

Prepare an auditor copy by hiding sensitive fields. Then edit a visible value to see tampering detected.

Live redaction demo: hide fields, keep the seal

Press Hide on sensitive fields to prepare an auditor copy. Then try editing a visible value.

Sealed root (SHA-256)
computing...
Root recomputed from the shared copy
computing...
Computing seal...
Simplified demonstration in your browser: each field gets a random salt and its own SHA-256 fingerprint, and the fingerprints combine into one root seal. A hidden field is replaced by its fingerprint, so the root still verifies without revealing the value. Sample data is fictitious.
How it works

Every field gets its own fingerprint.

When evidence is sealed, each field is fingerprinted separately with a random salt, and the fingerprints combine into the seal. A hidden field is replaced by its fingerprint, so the seal can still be recomputed and checked without revealing the value.

  • Field-level redaction profiles per audience and jurisdiction
  • Hidden values cannot be recovered from the shared copy
  • Visible fields remain fully tamper-evident
  • Original producer signatures remain valid

Supports, does not replace, your privacy programme. Redact is a technical control that helps reconcile record-keeping with data minimization and erasure requests. How it applies to a given legal obligation remains a decision for your privacy and legal teams.

Next

Hand the redacted copy to anyone. Verify lets them check it offline.

Frequently asked questions

How does Attestorian Redact hide personal data without breaking the cryptographic seal?

When an evidence package is sealed, each individual field receives a unique cryptographic salt and SHA-256 fingerprint that roll up into the signed root digest. During redaction, sensitive fields like customer names or account numbers are replaced by their fingerprint, allowing offline verifiers to recompute and validate the exact root signature.

Can hidden values be recovered from a redacted Attestorian evidence package?

No. Hidden field plaintext and salt values are completely stripped from the shared auditor copy, leaving only the irreversible cryptographic digest. External reviewers cannot brute-force or reconstruct redacted PII, while all remaining visible fields stay 100% tamper-evident.

Verify redacted evidence for yourself.

Test selective redaction workflows against your privacy and audit requirements. The USD 10,000 pilot fee is credited in full toward your annual license.

Last updated: