PRICING · 14 DAYS OF EVERYTHING, THEN A CODE

Try the whole thing
for 14 days.

No card, no account, nothing held back. When the 14 days are up the app keeps finding — it reads the whole file, lists every identifier and shows you the substitute it would use — and it stops writing until a code is entered. Four ways to buy one, and all of them work offline.

List price. Tier A is the developed markets and Greater China; if you are buying from elsewhere, switch to Tier B.79% of list, for the rest of the world — the same product, the same updates, the same support. Your region is set by where you buy.

ONE JOB, DONE PROPERLY

Document Pack

$12$9per pack

20 output files · valid 12 months · codes stack · 1 device

The occasional document. A tenancy agreement before you send it on, a medical letter, one bundle.

No batch queue, no command line — those live on Pro.

Buy a pack

FOR ONE PERSON

Personal

$49$39per year

unlimited documents · or $5 a month · monthly billing available at the same regional rate · 2 devices

Anyone who redacts something most weeks: job-seekers, tenants, parents, sole traders, and everyone who pastes documents into an AI assistant.

No batch queue, no command line — those live on Pro.

Buy Personal

FOR A FIRM

Business

$240$189per seat, per year

$20 per seat per month, billed annually · 5-seat minimum · one device per seat

Firms, clinics, practices and public bodies that need one person to hand licences out and one place to answer for them.

Talk about seats

Enterprise and air-gapped

Site licences, an offline licence server inside your own network, custom languages, source escrow, and a perpetual option for procurement departments that cannot buy a subscription. Priced per estate.

Ask for a quote

The trial, and what comes after it

It never stops finding. It stops writing.

A free tier of five documents a month is a Document Pack given away, and a trial that cripples the product tells you nothing about it. So the trial is the whole thing for 14 days, and what follows is a mode that still earns its place on the machine.

01 · DAY 1 TO 14

The whole product, no card, no account

Every format, every language, turn-back, the signed report, the batch queue, the command line. Nothing is held back and nothing is asked for: the trial starts when the app does, on the machine it was installed on.

02 · AFTER THAT

Find-only — it still finds, it just stops writing

Drop a document in and it reads the whole file, runs the on-device model, and lists every identifier with its location and the substitute it would use. What it will not do is write the redacted file, turn one back, or export the report. Nothing leaves the machine in this mode either.

03 · A CODE

Paste it once and the same document writes out

Buy on the website; the code arrives by email. Paste it into the app and it takes effect there and then — no account to make, no page to visit, nothing sent. A pack, a subscription and a seat all arrive the same way.

In every tier

The things that make it safe are never the paid part.

Tiers differ by volume, devices, team features and support. They do not differ by how well the tool works, and a lapsed licence has never made an output less safe — the app refuses to write rather than writing something weaker.

Every language

Chinese, English, Spanish and French rules and placeholder styles are in every tier. Languages widen the market; charging for them narrows it.

Every format

Word, Excel, PowerPoint, PDF, email and plain text — read from the inside, not just the visible page. No format is a paid add-on.

Turn-back

The mapping that restores the real names stays in an encrypted store on the machine, at every tier. It is the reason a redacted bundle is still usable.

The signed report

Counts by category, the rule-pack and application versions, and digests of the input and output. It ships in every tier, because it is the object a compliance officer asks for.

Free, and staying that way

Four things that never need a code.

FREE, ALWAYS

The scan

Find-only is not a countdown to a locked app. It stays, so a machine that never pays can still be used to check whether a document is safe to send.

FREE, ALWAYS

Rule-pack updates

New identifier rules and new jurisdictions reach every installation, licensed or not. Recognition is not something to sell back to somebody a year later.

FREE, ALWAYS

The command line's scan verb

`detect` is free at every tier, so a developer can wire detection into a pipeline without buying anything. Writing files is what a licence is for.

FREE, ALWAYS

Verifying a report

Anyone can check a signed report against the key in the app, including someone who only received a redacted document and wants to know what was done to it.

Where you are buying from

Two regional prices, not fifty.

The same product sells in Lagos and in London. Tier A is list; Tier B is 79% of it. Two bands are simple to explain and hard to arbitrage, and a code is locked to the region it was bought in. Prices are USD.

RegionDocument PackPersonalProBusinessWhere
Tier A
List price
$12$49$149$240United States, Canada, United Kingdom, European Union, Switzerland, Japan, Korea, Australia, Singapore, Hong Kong SAR, Taiwan, Chinese mainland, the Gulf
Tier B
79% of list
$9$39$119$189The rest of the world — South and Southeast Asia outside Singapore, Africa, Latin America, Eastern Europe, Türkiye, Central Asia

How a code becomes a licence

Activated once. Offline from then on.

Everything sold here — a pack, a subscription, a seat, a site licence — ends in the same object: a signed string of about 150 characters that the machine can check entirely on its own. It is long precisely so that nothing has to be looked up.

01 · BUY

Order on the website, pay, and check your email

A pack, a subscription or a batch of seats — all of them are bought here, and all of them arrive the same way: an activation code in the purchase email, with the same licence attached as a file for anyone who would rather keep one.

02 · PASTE

The code is the licence, not a ticket for one

Paste it into the app and it takes effect there and then. Nothing is exchanged, because there is nothing to exchange: the code carries its own signature, and the app checks it against a key built into the program.

03 · OFFLINE

A machine that has never been online is not a special case

It is the same case. Buy on your phone, read the email on your phone, type or carry the code across to the air-gapped machine. No portal, no exchange, no fingerprint to register — the code does not care which machine reads it.

04 · AFTER

Checked locally at every start, forever

Not to open a document, not to redact one, not to keep working when a subscription comes up for renewal (there are 14 days of grace, and after that it is Find-only, never a locked door). The only thing that ever reaches us again is an email, if you lose the code and want it reissued.

What buying changes about the network

Nothing. Not even at activation.

The rest of this site makes a strong claim: the document never leaves the machine, and the program opens no socket unless the operator switches the update check on. Paying for something is exactly where a claim like that usually quietly stops being true — a licence check, a seat count, a renewal ping.

There is none here. The code you paste is the licence: it carries its own signature, and the application verifies it against a key compiled into the program. A machine can be sealed in a room with no network for the entire life of the licence, and the software will neither notice nor care.

That is also why the code is long. A short key would have to be looked up somewhere, and somewhere is a server. This one is checked where it is used.

WHAT THE PROGRAM SENDS
Opening a document — nothing.
Finding, replacing, the final re-scan — nothing.
Activating a code — nothing. It is checked on the machine, against a key inside the program.
Renewals, seat checks, usage reports — none exist. There is no endpoint for one.
↓ THE ONE EXCEPTION
THE UPDATE CHECK

Off by default, to one endpoint the operator can see, and only when they switch it on. A firm that never does has a program that never opens a socket at all — before it is paid for, and after.

For comparison

What the same job costs somewhere else.

List prices read from each vendor's own page on 19 September 2026. They change; check them. The pattern does not: the cloud tools meter documents or pages because their processing costs them money, and the desktop editors treat redaction as one feature among two hundred.

ProductList priceWhat you getFree / trial
Adobe Acrobat Pro$239.88 / yearPDF only; redaction is a feature of an editor7-day trial
Foxit PDF Editor+$159.99 / yearPDF only; no turn-back14-day trial
Redactable$228 / yearCloud; 15 documents a month, uploaded3 free documents
iDox.ai Redact$390 / yearCloud; metered by the page20-page trial
PII Blackout$249 / yearOffline; 100 pages a month3 PDFs a day
Ouli Redact Pro$149 / yearOn-device; unlimited; turn-back; signed report14-day full trial

The fine print, in plain words

Questions worth answering before you pay.

Do I need an account?

No, and there is not one to make. The trial starts on the machine, and a code is checked against a key inside the application — on the machine, with nothing sent. Nothing about you is stored on our side except the order you placed and the address the code was emailed to.

What happens to my documents if I stop paying?

Nothing. They were never anywhere but your machine. The app keeps opening them, keeps finding everything, and stops writing new redacted files until a code is entered — and the mapping that turns produced documents back is still in the encrypted store where it always was.

Do packs stack?

Yes. Two codes are 40 output files, three are 60, and they are spent nearest-expiry first so nothing is wasted. A pack counts output files written, not scans — browsing a document costs nothing. On the fourth pack in a year the app points out that a subscription is cheaper and does not count documents at all.

Why is the code so long?

Because it is checked with no network. A code that can be verified on a machine that has never been online has to carry its own signature, and a signature is 64 bytes — about 150 characters once it is readable. A short key would only be a lookup key, and looking it up means a server. It is meant to be pasted out of the email, never typed, and the app is forgiving about line breaks and spacing.

Can I buy it for someone else?

Yes. A code is not tied to a device or to an account, so it can be bought for a client, a colleague or a parent and forwarded as it is. Ask and we will invoice for a batch.

Monthly or annual?

Annual is the price above. Monthly is available on Personal and Pro at the figures shown under each card, which carry the usual premium for paying monthly.

Refunds?

Fourteen days, no questions. The trial is long enough to know, so a refund request usually means the product did something we should hear about.

What if the company disappears?

The licence file is verified against a key built into the application, with no server in the path, so an installed copy keeps working whatever happens to us. Enterprise customers can have source escrow in writing.

Start with the 14 days. Decide after that.

The installer carries the recognition model and every runtime it needs, so the trial works on a machine that has never been online. If you are buying for a firm, or for somebody else, tell us how many seats and we will send the codes.

NO CARD · NO ACCOUNT · 14-DAY MONEY BACK · CODES ACTIVATE OFFLINE