They process your documents
on their servers.
We don't.

Every redaction tool asks you to upload sensitive documents somewhere. ZeroEgress is the only one that doesn't. Here's the full comparison.

At a glance

Redactable

Uploads to cloud

Documents leave your device and are processed on Redactable's servers. Requires SOC 2 and HIPAA trust chain. From $19/month; pay-as-you-go available.

SafeRedact

Sends text to API

Extracts text in the browser, then sends it to an external AI API for classification. Text leaves your device. Free (1st doc) · $12 day pass · $29/mo · $99/yr.

2redact

Browser-based

Free browser-based redactor. Regex detection only, no AI, no named-entity recognition. No audit trail, no encrypted memory. Accepts PDF, DOCX, images (OCR) and CSV.

PrivacyScrubber

Browser-based

Browser-based redactor with local NER (model not specified) and reversible tokenization. Markets 23 industry profiles selected manually by the user. Signed session receipts (SHA-256); no tamper-evident event chain, no supply-chain attestation, no patent published. $15/mo or $110 lifetime.

ZeroEgress

Nothing leaves your device

AI model runs locally via WebAssembly. Documents, text, and results never leave the browser. Verify with DevTools > Network. Free during beta.

Feature comparison

What matters when you're redacting regulated documents.

Redactable SafeRedact 2redact PrivacyScrubber ZeroEgress
Data stays on device ✗ Cloud Partial: text sent to API ✓ 100%
AI-powered PII detection ✓ (external AI API) ✗ Regex only ✓ NER (model unspecified) ✓ DistilBERT (WASM)
Documented open-source model (auditable) Unknown ✗ (external proprietary API) ✗ (no model) Unknown ✓ dslim/distilbert-NER (Hugging Face)
Verified AI model supply chain (signed manifest, per-segment hash check) ✗ (external proprietary API) ✗ (no model) Unknown ✓ ECDSA-signed manifest, every shard SHA-256-verified before use
Verifiable creation time (externally anchored) ✗ (vendor-asserted log) ✗ (signed receipts, no external anchor) ✓ External time value bound at the chain origin; head digest can be timestamped externally
Auto-detects document type (healthcare / financial / legal / etc.) Partial: 23 industry profiles, manual selection ✓ 9 profiles, auto-selected
No signup required 3 free docs, account required ✓ (1st doc free, no signup) Requires purchase ($15/mo or $110 lifetime) ✓ Always
No installation
Original text removed from output ✓ (pixel-burn) Unknown Unknown ✓ (new file generated)
Output is searchable & accessible Likely not (pixel-burn renders as image) Unknown Unknown ✓ Real text
Reversible tokens (work with AI, get details back) ✓ [NAME_1] + Reveal
Cryptographic audit trail Audit log (not cryptographic) Enterprise plan only ✓ HMAC-SHA256 chain + ECDSA-signed export + signed compliance certificate
Memory clearing (NIST SP 800-88)
End-to-end encryption in browser ✓ AES-256-GCM
Verifiable (DevTools) Partial: API calls visible Unknown Unknown ✓ Zero requests
File formats PDF, TIFF, PNG, JPG PDF, JPG, PNG PDF, DOCX, images (OCR), CSV PDF PDF, Word, Excel, PPT, JPG, PNG, TIFF
SOC 2 / HIPAA certification N/A: no server to audit
USPTO patent
Price 3 free docs, then from $19/mo; pay-as-you-go available Free (1st doc) · $12 day pass · $29/mo · $99/yr Free $15/mo or $110 lifetime Free (beta)

What makes ZeroEgress different

True zero egress US Patent 12,665,758

Redactable uploads your document to their cloud. SafeRedact extracts text and sends it to an external AI API. ZeroEgress runs the entire AI pipeline, NER model, encryption, memory clearing, inside your browser. Open DevTools > Network tab during processing. You'll see zero outbound requests. That's the proof.

Redaction that's both permanent and functional Unique

SafeRedact uses "pixel-burn", rendering each page as a new image. The original text is gone, but the output is likely not searchable or accessible to screen readers. ZeroEgress generates a completely new document with redacted text. The original text is never in the output, but the result is real, searchable, accessible text.

No trust chain required

Redactable needs you to trust their servers, their SOC 2 auditor, their encryption, their employees. SafeRedact needs you to trust an external AI API provider's retention policy. ZeroEgress needs you to trust your browser. And you can verify it yourself, the code runs in front of you. Beyond watching DevTools, every session can export a signed compliance certificate and a signed audit trail that any third party verifies offline with standard tools.

Where they win (and it's fine)

Redactable has team collaboration and integrations with Clio and Google Drive. If you need 10 people working on the same document with shared workflows, Redactable is built for that. ZeroEgress is built for when data can't leave the device. Different problem, different tool.

See for yourself

Drop a document. Watch the Network tab. Nothing leaves.

Try ZeroEgress: free, no signup