Visual covering changes appearance, not necessarily the underlying content
PDF pages can contain multiple independent objects layered on top of one another. If you place a rectangle over a text object, the original text may still exist underneath. A recipient might be able to select it, search for it, copy it, remove the covering object or extract the original content with another tool.
The same principle applies to scanned pages. Covering part of the visible image may hide it visually, but other representations of the information, such as an OCR text layer, metadata or attachments, can still remain.
Secure redaction is a removal workflow
A proper redaction process removes the underlying content from the file and then applies a visible redaction mark if desired. Professional tools may also offer sanitisation steps for comments, hidden layers, metadata, embedded files and other information that is easy to overlook.
After redaction, verification matters. Search for the removed text, attempt to select around the redacted region, inspect metadata where appropriate, and reopen the final file in a different viewer. For high-stakes documents, use software designed specifically for secure redaction and follow your organisation's procedure.
Where whiteout is still useful
Visual whiteout is useful for ordinary presentation tasks: covering a typo before placing corrected text on top, hiding an irrelevant mark in a non-sensitive handout, or creating a clean-looking draft. It is an editing convenience, not a security feature.
NowConverter labels its PDF whiteout accordingly. If the information must be impossible for the recipient to recover from the PDF, use a dedicated redaction workflow rather than relying on a visual cover.
OCR adds another layer to consider
When a scanned PDF has an OCR text layer, the visible image and recognised text can diverge. A visual edit to the image does not automatically remove words from an existing text layer. Conversely, editing OCR text does not necessarily alter the pixels visible in the original scan.
This is why confidential scanned documents deserve a complete review after editing. Consider both what a person can see and what software can search, select or extract.
A safer checklist for sensitive PDFs
- Work on a copy and retain the original separately.
- Use dedicated redaction software when content must be permanently removed.
- Check text layers, comments, attachments and metadata where relevant.
- Reopen the final PDF and try searching for the redacted terms.
- Follow legal or organisational rules when the document is regulated or evidentiary.
Keep the original and verify the result
File conversion is most reliable when the source is preserved until the new file has been checked in its real destination. If a document, image, subtitle or media file has legal, archival or production value, keep the original separately and treat the converted version as a derivative copy.
Why visually covering text is not enough
| Method | Visible result | Privacy consequence |
|---|---|---|
| Opaque white rectangle | Text appears hidden on page | Underlying text objects may still be extractable. |
| OCR text overlay | A replacement appears readable | Original image pixels may remain beneath. |
| True content removal | Sensitive material is deleted from the underlying PDF | Must be verified after export, including metadata and embedded content. |
| Flattening alone | Layers may become one rendered surface | Not a universal guarantee that hidden information is removed. |
Simple thought experiment: cover an account number with a white box and email the PDF. If someone can select or copy the original number, no secure redaction happened. Use a purpose-built redaction workflow for sensitive documents and verify the exported copy.