Help & support.
Redaction you can prove, and your documents never leave your Mac. Here's how to get help with it.
Email a human.
direct · no ticket queueEmail us about anything — a bug, a false-negative you saw, or a feature request. Because Silo Redact runs entirely on your Mac, please don't attach the source document; the verification-report summary is usually enough for us to help.
Email support ↵The short answers.
privacy · verification · detectionNo. Detection, burn-out, and verification all run on your Mac — no cloud service is in the loop. There is no account and no telemetry. The only optional network event is a single consent-gated model download for the contextual detection tier, which you can decline and still get every core redaction feature.
Because PDF redactions done in general-purpose tools have repeatedly leaked when the underlying text or metadata survived. After burn-in, Silo Redact re-opens its own export and tries to recover your text. A file that passes is exported with a -REDACTED name, and you can save its report separately: it lists each check and the SHA-256 hashes of input and output. If removed text is proven to survive, the file is named -FAILED-DO-NOT-SEND and is never presented as a redaction.
US Social Security, card, bank routing and employer ID numbers, driver's license and passport numbers, emails, phone numbers, dates, postal addresses, form-field values and personal names, with text recognition for scanned pages. Detection is tuned for English-language documents and US identifier formats, so drag your own box over anything it misses. These detectors ship inside the app and work offline.
Yes. The built-in sample document is filled with invented personal data and runs the whole cycle (detect, review, burn, verify) with no download.
A contextual detection tier that catches things the pattern and named-entity detectors miss — for example, a client identifier that isn't a pattern or a common name. It downloads once with your consent, and you can decline it; core redaction ships fully functional without it.
Yes. The redacted export is rebuilt from page images, so no text layer, form field or metadata from your original survives, and the verifier will not pass the export if any of it appears. To strip hidden data without redacting anything, use Clean & Verify: it writes a separate cleaned copy of a PDF (document info, XMP, embedded scripts and actions, attachments, page thumbnails) or a JPEG or PNG image (EXIF and GPS), then re-checks it. A clean that does not verify is quarantined instead of saved.
An Apple Silicon Mac (M1 or newer) running macOS 14 (Sonoma) or later.
Silo Redact is a one-time purchase of $19.99 on the Mac App Store. No subscription and no in-app purchases.