GoCalma vs Redactable

GoCalma is open-source browser software for detecting and redacting sensitive information in PDF files without sending document contents to a server. It identifies more than 30 personal-information types and validates formats across more than 10 European ID formats. Users can choose redaction, masking, hashing, highlighting, or synthetic replacement by information type, then review candidates with the strategy, pattern, and confidence behind each flag. OCR for scanned or image-heavy PDFs runs locally. Listed profiles include Swiss DPA, EU GDPR, Healthcare, Financial, and Full Scan. An encrypted .gocalma recovery key can restore the original document later with the matching key. The repository says key payloads use AES-GCM encryption and redaction removes PDF author, title, and timestamp metadata. Its audit summary records a design-level concern involving raw key storage when no password is set. The Vercel demo uses regex-only detection because model files exceed its 250 MB limit. Local setup requires Node.js 18 or later, npm, and a modern desktop browser. The software is distributed under the MIT License.

Redactable is a web-based platform for detecting and permanently removing sensitive information from documents and images. Its AI identifies personal, health, financial, and other sensitive patterns for redaction. Built-in OCR makes scanned documents and image-based PDFs searchable before redaction. Supported inputs include PDF, TIFF, PNG, and JPG files from device uploads or supported third-party services; output is PDF. Redactable says it removes hidden metadata, embedded objects, and residual data from redacted files. Collaboration tools include shared workspaces, task assignments, comments, role-based permissions, activity logs, and version history. It can generate redaction certificates and audit logs recording who redacted what and when. Integrations listed include Google Drive, Dropbox, OneDrive, Box, SharePoint, and Clio. Redactable states that it is SOC 2 Type II certified and HIPAA compliant, uses AES-256 encryption at rest and TLS 1.2 or higher in transit, and does not retain document content beyond the redaction job or use it to train AI models. Three documents are free; pay-as-you-go costs $7.50 after that. Starter costs $19 a month billed annually.