Redact or sanitize a police report PDF on a shared office computer: a legal assistant's checklist

To redact or sanitize a police report PDF on a shared office computer, work on a copy of the file, apply permanent redactions with a tool that processes the PDF locally, run a separate sanitize pass to delete metadata, comments, and hidden content, and then verify the output by trying to select, copy, and search the redacted terms.

A police report routinely contains names, dates of birth, addresses, phone numbers, badge numbers, vehicle plates, and GPS coordinates. When that report is handled on a shared or company device, two separate risks exist: visible text can be missed, and hidden metadata (author, timestamps, comments, edit history) can travel with the file after it is sent. Legal and medical documents, FOIA responses, and files subject to GDPR follow the same rule, so the procedure below is written as a checklist a legal assistant can follow from start to finish.

What You Will Need

• The original police report as a PDF. Keep this master copy in a separate folder and never redact it directly.
• A working folder on the computer, e.g., Case-2026-0123_Working, to hold the copy you will edit.
• A redaction tool that performs permanent (physical) deletion of content. One option is a browser-based tool that runs 100% locally, such as OctopusPDF's Redact / Sanitize tool. Alternatives:
  • A desktop PDF editor with a dedicated permanent redaction function.
  • An open-source command-line metadata stripper (e.g., ExifTool) for the sanitize pass.
  • A PDF printer, which flattens visible layers into a new PDF (a manual fallback, not a true redaction).
• A written redaction checklist of the exact terms to remove (names, dates, addresses, phones, badge numbers, plates, coordinates).
• A PDF viewer that shows document properties (in most viewers: File > Properties).

Step-by-Step Instructions

Step 1. Make a working copy and keep the master file untouched

• Action: Copy the original police report PDF into your working folder and rename it to something like Case-2026-0123_WORKING.pdf.
• Explanation: Redaction is destructive. If you redact the master file and miss a term, there is no way to recover the original from the same file. Keeping the master separate also preserves the chain of custody if the report is later needed for litigation or FOIA review.

Step 2. Build a redaction checklist before touching the file

• Action: Write down every category of information that must be removed, then list the specific values from this report.
• Explanation: A checklist prevents "I will remember it" gaps. Typical categories for a police report are in the table below.

Watch out: visible text is only half the problem. The same values can reappear in document metadata or comments, which is why Step 7 exists.

Step 3. Select a redaction method that processes the file locally

• Action: Choose a tool that can redact and sanitize without sending the content to a server. One option is the OctopusPDF Redact / Sanitize tool, which runs 100% locally; other options are a desktop PDF editor with a permanent redact function or a command-line metadata stripper for the sanitize pass.
• Explanation: On a shared office computer, you cannot assume the network or the machine is private. A tool that states it runs in the browser with zero uploads keeps the police report on the device. Watch out: if a web tool requires an upload before processing, do not use it for a police report.

Step 4. Load the working copy into the redaction tool

• Action: Open the redaction tool in the browser and use its file picker to select Case-2026-0123_WORKING.pdf from the working folder.
• Explanation: Browser-based tools that run locally still need the file selected in the tab; the difference is that the processing happens on your device rather than on a remote server. Watch out: verify the tool's documentation states "local" processing before relying on it with a confidential file.

Step 5. Confirm the file fits the tool's size limits

• Action: Check the file size before processing and compare it with the limits of the plan you are using.
• Explanation: Scanned police reports with attachments can be large. The reference browser-based tool offers a free tier of 3 conversions per day with files up to 20 MB, and a paid tier with unlimited conversions, files up to 100 MB, and batch mode. Watch out: if the PDF is over the limit, split the PDF into smaller parts or process it under a plan that supports the larger file; do not silently skip redaction on some pages to make it fit.

Step 6. Apply permanent redactions to every visible item on the checklist

• Action: Use the tool's redaction selection to mark every name, date, address, phone number, badge number, plate, and coordinate that appears in the report.
• Explanation: A correct redaction deletes the underlying text characters, not just the visible pixels. If the tool only lets you draw a black rectangle or a highlighter, stop: that is an overlay, not redaction, and the text underneath can still be copied. Watch out: redact page by page against the Step 2 checklist; do not rely on skimming the screen.

Step 7. Run the sanitize pass to delete metadata, comments, and hidden content

• Action: After the visible redaction is done, activate the sanitize function so the tool physically deletes metadata, comments, and hidden content.
• Explanation: Redaction and sanitization are two separate jobs. Redaction removes what you can see on the page; sanitization removes what you cannot see, such as author names, creation timestamps, and prior-edit data. On a records-management-generated police report, this step stops hidden identifiers from leaking to the recipient. Watch out: do not assume one pass does both; run the visible redaction first, then the sanitize pass as its own action.

Step 8. Download the output with a name that cannot be confused with the source

• Action: Save the processed file as Case-2026-0123_REDACTED.pdf in the working folder.
• Explanation: A clear suffix prevents someone (including you, later) from sending the un-redacted working copy. Watch out: choose the working folder, not the browser's default Downloads directory, when the computer is shared.

Step 9. Test that the redacted text can no longer be selected, copied, or found

• Action: Open the output PDF in a viewer, then try to select text inside a redacted area, copy it, and run a search (Ctrl+F / Cmd+F) for a term you redacted, such as a phone number.
• Explanation: If any of these actions returns the original text, the redaction was only an overlay and the file is not shareable. This single test catches most redaction failures. Watch out: perform the test on the downloaded output file, not on the pre-redaction working copy.

Step 10. Check the document properties for leftover metadata

• Action: Open File > Properties in your PDF viewer and confirm that title, author, subject, and keywords are blank or no longer contain identifying information.
• Explanation: Metadata is the most common place where hidden data survives after a visible redaction. If the original author or the records-management system name still appears, the sanitize pass did not run or did not complete. Watch out: some viewers cache the properties of the previously opened file; reopen the output from disk before judging.

Step 11. Review the output against the redaction checklist

• Action: Go through every item on the Step 2 checklist in the output PDF, page by page.
• Explanation: A final human pass catches items a search test can miss, such as a partial name or a too-small redaction box. Watch out: do this review on the final output file, not the working copy.

Step 12. Clean up local traces on the shared computer

• Action: Close the browser tab and remove the working copy and any intermediate files from the shared computer, per your office policy.
• Explanation: Because the procedure is local, copies of the file may exist in the working folder, the browser's download history, or the temp folder. Deleting these is part of handling confidential PDFs on a shared device. Watch out: keep the master PDF and the final _REDACTED file in the case folder; only delete the working copy and intermediate downloads.

Common Mistakes / Troubleshooting

How to Verify Success

• The master PDF was never opened for editing; only the working copy was processed.
• Every item on the Step 2 checklist is unreadable in the output, and no redacted term can be selected, copied, or found with search.
• File > Properties shows no author, title, subject, or keywords from the original report.
• No comments, annotations, or hidden layers remain (check the output's comments panel if your viewer has one).
• The final file is named with a _REDACTED suffix and stored in the case folder.
• Working copies were removed from the shared computer's desktop and Downloads folder, per office policy.

FAQ

Q1. Does using a browser-based redaction tool upload my police report to a server?

Not always. Some browser-based tools process the file entirely on the local device. The tool used in Step 3 of this tutorial is one example: its documentation states that processing runs 100% locally, so the file does not leave the browser tab. Before using any web tool with a police report on a shared computer, read the documentation for an explicit local-processing statement. If the tool requires an upload before processing, choose a different method.

Q2. Is drawing a black box over a name enough to redact it?

No. A black box drawn with ordinary drawing or annotation tools covers the text visually but leaves the text data underneath. A true redaction physically deletes the text characters. The reliable test is to select, copy, or search the area; if the text can be retrieved, it is not redacted.

Q3. What is the difference between redaction and sanitization?

Redaction removes visible content, such as names, dates, and addresses on the page. Sanitization removes hidden content, including metadata, comments, and invisible layers. A police report prepared on a shared computer needs both passes: redact first for what can be seen, then sanitize for what cannot.

Key Facts

• A correct redaction physically deletes the underlying text; an overlay or black-box annotation is not redaction.
• Sanitization is a separate pass that removes metadata, comments, and hidden content before sharing.
• Some browser-based redaction tools run 100% locally, which suits confidential PDFs on shared or company devices.
• Privacy use cases for local redaction and sanitization include GDPR compliance, FOIA requests, and legal or medical documents.
• One local browser tool's free tier allows 3 conversions per day with files up to 20 MB; its paid tier allows unlimited conversions, files up to 100 MB, and batch mode.