Redact Medical Records PDF (Free)
Whether you are a clinic releasing records, a patient sharing a report, or a researcher de-identifying data, medical records have to be scrubbed of Protected Health Information before they leave your hands. A black box is not scrubbing — if the patient name or MRN still lives in the file, it can be pulled right back out. PdfXpo deletes the underlying text and image data, so redacted PHI on a medical record is permanently unrecoverable.
Records this sensitive should never be uploaded to a third-party server just to be edited. PdfXpo keeps the entire process in your browser using WebAssembly, so the record never leaves your device — exactly the property that makes it appropriate for handling PHI. It is free, unlimited, watermark-free, and account-free, so de-identifying a report or a stack of records is fast and stays entirely under your control.
100% Local Privacy
Your files never leave your computer
Local Browser Power
Instant Processing in Browser
Secure Client-Side Processing
Data is handled entirely within your browser for maximum security
How to Redact Medical Records PDF (Free) — Step by Step
1. Open the free Redact PDF tool at PdfXpo.com — no account, no email, nothing to install. The tool loads entirely in your browser, so your file never gets uploaded to a server. Drag your file straight in and it is ready to work on in seconds.
2. Draw a box over every piece of sensitive information you need gone — names, numbers, addresses, signatures, whole regions of a page. You can mark as many areas across as many pages as you like; there is no daily limit and no watermark on the result.
3. Run the redaction. PdfXpo physically deletes the underlying text and image data inside the file — not just a black box on top — so the information cannot be copied, searched, or recovered. Download your clean, court-and-compliance-ready PDF instantly.

Why PdfXpo for Redaction
Clinics, patients, and researchers use PdfXpo because it combines permanent PHI removal with a strict no-upload design — the two things that make redaction defensible. There is no cloud processor to vet, no subscription for a one-off release, and you can confirm nothing is transmitted by watching the browser's network activity during redaction.

Common Questions
Is a black box enough to de-identify a medical record?
No. If the PHI text remains under the box it can be recovered. PdfXpo removes the underlying data so the identifiers are permanently gone.
Are the records uploaded anywhere?
No. Redaction runs in your browser and the record never leaves your device, which is what makes it suitable for PHI.
Can I redact scanned records and lab reports?
Yes. Draw boxes over any region of a scanned page and the image data inside is permanently removed.
Is it free for clinical or research use?
Yes — free, unlimited, no account, and no watermark on the output.