Skip to content
SPECIFICTION
Get listed

GoCalma

github.com

Free plan WebSelf-hosted
Visit github.com
Spec score 7.8 #14 of 27 in Document Redaction Software

What it is

GoCalma is open-source browser software for detecting and redacting sensitive information in PDF files without sending document contents to a server. It identifies more than 30 personal-information types and validates formats across more than 10 European ID formats. Users can choose redaction, masking, hashing, highlighting, or synthetic replacement by information type, then review candidates with the strategy, pattern, and confidence behind each flag. OCR for scanned or image-heavy PDFs runs locally. Listed profiles include Swiss DPA, EU GDPR, Healthcare, Financial, and Full Scan. An encrypted .gocalma recovery key can restore the original document later with the matching key. The repository says key payloads use AES-GCM encryption and redaction removes PDF author, title, and timestamp metadata. Its audit summary records a design-level concern involving raw key storage when no password is set. The Vercel demo uses regex-only detection because model files exceed its 250 MB limit. Local setup requires Node.js 18 or later, npm, and a modern desktop browser. The software is distributed under the MIT License.

Spec sheet

Purpose
GoCalma detects and redacts sensitive information in PDFs in the browser without sending document contents to a server.Read 9 Oct 2026 · github.com
Security
The repository states that .gocalma key payloads use AES-GCM encryption and that redaction scrubs PDF author, title, and timestamp metadata.Read 9 Oct 2026 · github.com
Privacy
The repository says PDF parsing, detection, OCR, redaction, and restoration happen locally in the browser, and plain document content is not sent to external servers.Read 9 Oct 2026 · github.com
License
The software is distributed under the MIT License.Read 9 Oct 2026 · github.com
Compliance profiles
The listed profiles are Swiss DPA, EU GDPR, Healthcare, Financial, and Full Scan.Read 9 Oct 2026 · github.com
Deployment limit
The repository says its Vercel demo deployment uses regex-based detection only because the NER model files are too large for Vercel's 250MB limit.Read 9 Oct 2026 · github.com
Detection review
Users can review detected candidates and see why each was flagged, including strategy, pattern, and confidence.Read 9 Oct 2026 · github.com
Languages
The listed interface and OCR languages are English, German, French, Italian, and Spanish.Read 9 Oct 2026 · github.com
PII detection
The repository says GoCalma detects more than 30 PII types and validates checksums across more than 10 European ID formats.Read 9 Oct 2026 · github.com
Redaction modes
Users can choose redact, mask, hash, highlight, or synthesize modes by PII type.Read 9 Oct 2026 · github.com
Reversible redaction
Users can export an encrypted .gocalma recovery key and later restore the original document with the matching key.Read 9 Oct 2026 · github.com
Scanned PDFs
The app runs OCR locally for image-heavy or scanned PDFs.Read 9 Oct 2026 · github.com
Security caveat
The repository's audit summary reports a design-level finding: raw key storage when no password is set.Read 9 Oct 2026 · github.com
Setup
The repository's local setup instructions require Node.js 18 or later, npm, and a modern desktop browser.Read 9 Oct 2026 · github.com

Plans and prices

Open-source Free Browser-based PDF redaction; repository provides local setup instructions Read 9 Oct 2026 · github.com

Every GoCalma plan and price →

Strong points and limits

Strong points

  • Processes PDF contents locally in the browser
  • Detects over 30 PII types
  • Offers five redaction modes by PII type
  • Runs local OCR on scanned PDFs
  • Encrypted recovery keys can restore originals

Limits

  • Raw key storage is noted when no password is set
  • Vercel demo uses regex detection only
  • Local setup requires Node.js 18 or later and npm
  • Input format is limited to PDF

Who it suits

It suits people needing local, browser-based PDF PII detection and redaction, including privacy-sensitive workflows. Users can self-host or run the documented local setup with Node.js, npm, and a modern desktop browser.

Verdict

GoCalma keeps PDF parsing, detection, OCR, redaction, and restoration in the browser while offering configurable review and recovery. Its documented passwordless key-storage concern and reduced Vercel detection mode are important deployment details.

Where Specifiction places it

Alternatives to GoCalmaAll alternatives →