Redactic for law firms

AI for lawyers that keeps client confidentiality: write with your clients' real names, and the model receives only placeholders.

Redactic replaces names, tax codes, addresses and the other identifiers it detects with placeholders before the model receives your message, then puts the real values back in your browser. Detection and masking run in Europe on infrastructure Redactic controls, your files are not saved, and every Blackout removes the text beneath it instead of covering it.

Pleadings, contracts, judgments, powers of attorney, client correspondence and scanned exhibits, in PDF, Word, Excel or as images.

Personal data masked before the AI Detection and masking in Europe Files and conversations not stored GDPR art. 28 DPA signed when you subscribe
The problem

Client confidentiality meets AI in your firm every day.

01You would like an AI to summarise a long case file, but the file is full of your clients' names, and some of your colleagues already paste documents into chat tools the firm does not control.
02Redacting a full bundle by hand in a PDF editor takes an afternoon, and a black box drawn over a PDF can leave the text underneath it in the file.
03The Word file you send to the other side still carries comments, tracked changes and the name of whoever wrote it.
04Before a judgment is published or quoted, the parties' names have to disappear in every form they take, the surname on its own included.
Secure Chatbot

Firm: your whole firm uses AI with real names, and the model receives placeholders.

With Firm, every associate and member of staff writes to the Secure Chatbot with the client's real name and the facts of the matter, asks for a draft reply or a summary, and Redactic masks the personal data in every message before the model receives it. The answer comes back masked and each person's browser puts the real names back in. If masking is not available, the message is not sent.

The chat keeps no conversation on our servers, masking runs in Europe on infrastructure Redactic controls, and the people who manage your workspace decide who uses the chat and how much AI each person can use. Document redaction for up to 50 users is part of the same plan.

  • Open to everyone in the workspace by default, or only to the people you choose.
  • A fast model or a reasoning model, chosen in the chat.
  • The countries of the conversation set the phone and ID formats Redactic recognises, and they stay for the whole chat.
  • Protection against prompt injection is active, and every turn counts against the AI quota of the person who sent it.

Working on your own? With Solo you have the same protection in the document chat: the file reaches the AI already masked, and the names you type in your questions are masked before they are sent.

In practice

Legal redaction software that reads a settlement letter the way you do.

Below is a fictitious settlement letter, as a firm would send it to the other side. Redactic finds the personal data, recognises the Italian tax codes and the IBAN by their check characters, and leaves the amount and the substance of the offer untouched.

What Redactic finds in this letter

Field in the documentType of dataHow Redactic handles itCheck character verified
Elena Marchetti, Marco ContiPerson namesRecognised; with the party list, certain in every form, surname alone includedNot applicable
MRCLNE82E52F205I, CNTMRC79T18L219WItalian tax code (codice fiscale)RecognisedYes
IT76W0306909606100000123456IBANRecognisedYes
Via Solferino 32, 20121 Milano (MI)Postal addressRecognisedNot applicable
[email protected]E-mail addressRecognisedNot applicable
+39 02 8734 1190Phone numberRecognisedNot applicable
RG 4471/2026Case numberMasked with one click on the number, or added to your listNot applicable
EUR 48,500.00Settlement amountKeptNot applicable

Fictitious data. The amounts, the dates you need and the structure of the letter stay as they are.

Workflow

From case file to shareable copy, or to an answer from the AI.

1

Upload the file and the parties

Add a PDF, Word or Excel file, a scan or a photo, or paste the text. Add the names of the parties to the list, with a type if you want one (a company, for instance), and Redactic masks every one of them with certainty.

2

Review what Redactic found

Each element is listed with its type. Redact all, keep all, or decide item by item, and click any word in the text to mask it as well. A surname or a first name on its own is linked to the same person.

3

Download, or work with AI

Download the PDF with Blackout and the redaction certificate, ready to file or send. Or open the document chat and ask your questions with the parties' names as they appear in the file: Redactic masks them before sending, and the answer comes back with the real names on your device.

Choose your plan →

Security

Built for professional secrecy, in daily work.

01

The AI receives placeholders, not your clients' names.

In the Secure Chatbot and in the document chat, Redactic masks the personal data it detects before the model receives the text, and the answer is restored in your browser. If masking is not available, nothing is sent.

02

Blackout removes the text, it does not cover it.

The text under every black box is deleted from the PDF, so it cannot be selected, copied or recovered from the exported file. Scans and photos are read with OCR first.

03

Certainty on the parties you name.

Every name on your list is masked wherever it appears, and a surname or first name used on its own is linked to the same person, so a party cannot slip through in a shorter form.

04

A certificate for every file.

The redaction certificate records the SHA-256 fingerprint of the file before and after, and how many items of each type were removed. It contains no content from the document, so you can keep it in the file or attach it.

05

Comments, tracked changes and properties stripped.

Redacted Word files lose their comments, tracked changes and author details; PDFs lose author and XMP metadata; photos lose EXIF and GPS data.

06

Europe, temporary processing and a DPA.

Detection and redaction run in Europe on infrastructure Redactic controls, without third-party AI reading the unredacted text. Your files are not saved, and the data processing agreement under GDPR art. 28 is signed when you subscribe.

Professional duties

Your duty of confidentiality, and the facts that serve it.

These are the rules your work answers to. Next to each one is what Redactic actually does, so you can judge for yourself how it fits your practice.

Confidentiality, CCBE Code of Conduct for European Lawyers, art. 2.3.

A lawyer keeps confidential everything learned in the course of professional activity and requires the same of everyone engaged in providing the service. With Redactic, the AI model receives placeholders in place of the client data Redactic detects, and the names on your party list never reach it in clear.

GDPR art. 28, processor.

Your firm decides why and how client documents are processed; Redactic acts as your processor under a data processing agreement signed when you subscribe.

GDPR art. 32(1)(a) and art. 4(5), pseudonymisation as a security measure.

Article 32 names pseudonymisation among the measures for the security of processing. Redactic pseudonymises personal data before any AI step, runs detection in Europe and keeps neither your files nor your conversations.

GDPR art. 5(1)(c) and art. 25, data minimisation by design.

Only the data a purpose needs should be processed. The AI receives the masked text, and the copies you share carry only the data you chose to keep.

Redactic describes what its tools do; the assessment of your own processing remains yours, with the support of the DPA and the Trust & Security page. Security

FAQ

Frequently asked questions.

Can I write my clients' real names to the AI?+

Yes. With Firm, the Secure Chatbot masks the personal data in every message before the model receives it, and your browser puts the names back in the answer. On every plan, the document chat masks the file before the AI sees it and masks the names you type in your questions too.

Is it safe to upload legal documents to ChatGPT?+

What matters is what the model receives. With Redactic the document is masked before any AI step: the model works on placeholders, and the real names return only in your browser. You keep a single tool for the whole firm, with access and AI quotas decided by whoever manages it.

Are conversations with the AI kept anywhere?+

Not on Redactic's servers. The Secure Chatbot keeps no conversation history, the conversation lives in your browser, and the map of placeholders is not retained between messages. The AI provider of the workflow you use receives only the masked text, under the terms set out in the DPA.

Can I give AI to the whole firm and decide who uses it?+

Yes, with Firm. The chat is open to everyone in the workspace or only to the people you choose, it can be switched off, and each person can have an AI quota.

Can a Blackout be undone, or the text copied from under the box?+

No. The text under each black box is deleted from the exported PDF, not hidden behind it.

Can I upload the list of parties so they are always redacted?+

Yes. Every name on the list is masked with certainty wherever it appears, including when only the surname or the first name is used, and you can give each entry a type, such as a company.

Where are documents processed, and do you keep them?+

Detection and redaction run in Europe on infrastructure Redactic controls, without third-party AI reading the unredacted text. Your files are not saved.

Who is the data controller, the firm or Redactic?+

Your firm is the controller for its documents. Redactic is the processor under GDPR art. 28, with a DPA signed when you subscribe. Enterprise firms can have a DPA built around their own policies. Data Processing Agreement Security

Guides

Guides for lawyers.

Data Redaction

Contract and Litigation Redaction for Law Firms (2026)

Read article →
Data Redaction

Data Redaction Guide 2026: Mask PII for GDPR and AI

Read article →
Data Redaction

Pseudonymised or Anonymous? EDPB 02/2026 and the SRB Ruling

Read article →
Start now

Bring AI into the firm, and keep your clients' names away from the model.

Detection and masking in Europe, no files or conversations stored, and a DPA signed when you subscribe.

For larger firms, Enterprise offers dedicated, single-tenant, private-cloud or on-premise deployment.

Choose your plan →