One download carries the whole program: the recognition model, the OCR models and the document runtimes. Nothing is fetched while it installs and nothing is fetched while it runs, so a machine that has never been online installs and works like any other. There is no account step, because there is no account.
It installs as the whole product for 14 days — no card, no account, nothing held back. After that it keeps finding everything and stops writing until a code is entered. What it costs.
Windows 10 and 11, and macOS on Apple silicon, today. Linux is coming soon — the card below says what it is waiting on.
NO ACCOUNT · NO TELEMETRY · NOTHING FETCHED DURING INSTALL · BUILT FROM COMMIT 6c2f366d (WINDOWS) · 8c5fd589 (MACOS)
Choose your platform
The same engine and the same rule pack run on all three — what differs is whether a build has been through release verification. Two have, so two are offered.
Carries the recognition model, the OCR models, the ONNX runtime, pdfium and a pinned WebView2 runtime. Nothing is fetched during installation.
Carries the recognition model, the OCR models, the ONNX runtime and pdfium; nothing is fetched during installation. It is not notarised, so macOS blocks the first open: the steps are below.
The Linux build runs on every commit and its packages pass the render probe, but they have not been through release verification, so they are not published here yet.
Three minutes, one dialog you should not be surprised by, and no network at any point.
ON WINDOWS
Double-click the .exe. It writes the program, the models and a pinned browser runtime into Program Files and adds a Start-menu entry. Nothing is downloaded during the install, so it finishes at the same speed on an air-gapped machine.
The installer is signed with minisign, not with an Authenticode certificate, so SmartScreen shows “Windows protected your PC”. Choose More info → Run anyway. Before you do, check the SHA-256 below — that is the check the certificate would not have given you anyway.
The program opens on the file picker. Detection, review and the final re-scan all run on the machine in front of you; the update check is off until somebody turns it on, and it is the only thing in the program that can open a socket.
ON MACOS
Open the .dmg and drag Ouli Redact onto the Applications folder beside it. That one item is the program, the models and the runtimes. Nothing is downloaded while it copies, so it goes the same way on an air-gapped Mac.
The app is signed with minisign, not with an Apple Developer ID, and Apple has not notarised it. The first open ends in a dialog headed “Ouli Redact” Not Opened: Apple could not verify it “is free of malware that may harm your Mac or compromise your privacy”. If it offers Move to Trash, that is the highlighted button: choose Done. Then open System Settings → Privacy & Security, where the app is listed as “blocked to protect your Mac”, choose Open Anyway there and again in the dialog that follows, and confirm with Touch ID or an administrator's password. Check the SHA-256 below before you do: it answers the question Gatekeeper could not.
The program opens on the file picker. Detection, review and the final re-scan all run on the machine in front of you; the update check is off until somebody turns it on, and it is the only thing in the program that can open a socket.
Verify what you downloaded
Every download is signed with minisign and listed in a SHA256SUMS file that is signed too. The signature's own comment records the product, version, commit and build time, and is covered by the signature — so it says not just that the file is intact, but which build it is.
The public key belongs on a page like this one rather than only inside the download: a key that travels with the file it authenticates proves nothing. Compare the copy in the release folder against the one printed here.
A failed check means the file is not what Oulution built. Do not install it — tell us, and download again.
79e95dea1ca5058accfe842a96998312d2e5003c8b9190d9afcc2535fda51f3c
e0c65ed9a26bdd2a92a2f9981f0b6c82cbb05b25fd8183ccbe6753dcb83fb980
RWSXGhIyTnwDr7Uk5Cmvg9wmVu7ISYKiXWE4/JGsonqggev2EcX5EtmB
Get-FileHash ".\Ouli Redact_0.5.0_x64-setup.exe" -Algorithm SHA256shasum -a 256 "Ouli Redact_0.5.1_aarch64.dmg"minisign -Vm "Ouli Redact_0.5.0_x64-setup.exe" -p oulution-release.pub
minisign -Vm "Ouli Redact_0.5.1_aarch64.dmg" -p oulution-release.pubminisign -Vm SHA256SUMS -p oulution-release.pub
sha256sum -c SHA256SUMS
shasum -a 256 -c SHA256SUMS # the same check, with what macOS shipsThe .minisig,
SHA256SUMS and verification
notes sit next to each download — the links are on its card above.
What is in the 788 MB
A tool that fetches its model on first run is a tool that needs the network on first run. This one carries everything, which is why it is the size it is.
The on-device model that finds names, organisations and addresses, with the ONNX runtime it needs.
Three models for pages that arrive as scans with no text layer. Also on-device.
The PDF engine and the Office readers, so .docx, .xlsx, .pptx, .pdf and .eml are read from the inside.
A fixed WebView2 build, used instead of whatever Evergreen version the machine happens to have — the window looks and behaves the same on every install.
oulution-redact.exe, installed beside the window, for batch work and scripted pipelines.
The identifier rules the tool ships with, signed, and replaceable from a USB stick with a newer signed pack.
The macOS disk image carries the same models, document runtimes and rule pack, and the headless CLI inside the app (Ouli Redact.app/Contents/MacOS/oulution-redact). It carries no browser runtime: the window is drawn by the WebKit that is part of macOS, which is the main reason the image is the smaller download.
WINDOWS
| Operating system | Windows 10 or Windows 11, 64-bit. |
|---|---|
| Processor | Any x86_64 CPU. No GPU is used or required. |
| Disk | About 1.5 GB once installed, plus room for the documents you work on. |
| Network | None, ever. Not for installing, not for licensing, not for running. |
| Privileges | Administrator for the install. The program itself runs as the signed-in user. |
MACOS
| Operating system | macOS 14.0 or later. That is what the build declares, and an older macOS will not open it. It has been run on macOS 27 so far. |
|---|---|
| Processor | Apple silicon (M1 or later). This build does not run on an Intel Mac. |
| Disk | About 750 MB in Applications, plus room for the documents you work on. |
| Network | None, ever. Not for installing, not for licensing, not for running. |
| Privileges | Touch ID, or an administrator's name and password, at the Open Anyway step. The program itself runs as the signed-in user. |
Every one of these is something you would otherwise find out at an inconvenient moment.
Windows will call the publisher unknown, and it is right to: no certificate authority has vouched for this file. The minisign signature proves it is byte-for-byte what Oulution built, which is a different — and checkable — claim. An OS-trusted certificate is a purchase decision, not an oversight.
The macOS build carries the same minisign signature as the Windows installer and no Apple Developer ID. No Apple service has checked it, so Gatekeeper blocks it until you allow it by hand, and after you replace it with a newer build macOS asks for your login keychain password before the new one may read its key (Always Allow makes that once). It runs on Apple silicon only. The Developer ID is a purchase decision, like the Windows certificate.
The engine builds and its tests pass on Linux on every commit, and the packages clear the render probe. That is not the same as a release, so nothing is offered here for Linux until it has been through release verification.
The update check is off by default and never installs anything on its own. When it is switched on it reads one manifest from one endpoint, and the program refuses any update whose signature does not match the release key printed above. That manifest names the Windows installer only, so on macOS a new version is a new download from this page.
This page describes software. What must be redacted, and for whom, stays with the firm; the tool's job is to make sure nothing reaches that decision unseen.
The installer runs silently for deployment, the headless CLI comes with it, and a licence is a signed file rather than a call home. Tell us how many machines and which platforms you need.
SILENT INSTALL · HEADLESS CLI · SIGNED LICENCE FILE · AIR-GAPPED MACHINES ARE A NORMAL DEPLOYMENT