Skip to content

Enterprise control

Sanitize

Sanitize removes hidden metadata, active content, and embedded risk before documents cross a trust boundary.

Request accessContact supportView capability
ToolboxBrowse the capability directoryWorkflowStorage governanceAPIRoutes, scopes, and recipesProofRedaction verification

Problem

PDFs can carry scripts, embedded files, metadata, and hidden objects that are not obvious from the rendered pages.

Use

Inspect and remove non-page risks according to an explicit sanitization policy.

Evidence plan

What this unlocks

  • Strip metadata and hidden content
  • Run from the document workspace once signed in
  • Available for repeatable batch or pipeline workflows

Workflow

Explore the workflow
Simple pathForm W-9

Quick OCR and field check

Turn a scanned form into a searchable PDF and verify the obvious fields before routing it.

  1. 1Upload the W-9
  2. 2Run OCR
  3. 3Inspect detected text and form regions
  4. 4Save a searchable copy

Tool chain

OCRForms Ops StudioSet Metadata Studio
Searchable PDFField review notesClean source metadata
Explore the workflow

Inputs & outputs

Accepted formats
pdf
Produced formats
pdf

Common use cases

  • Strip GPS and EXIF data
  • Remove JavaScript before external intake
  • Clean files before publishing or sharing

Workflow steps

  1. 1Inspect metadata, attachments, scripts, and active content
  2. 2Choose the sanitization policy
  3. 3Review the cleaned output and findings

Outputs

  • Sanitized PDF
  • Removed-content report
  • Follow-up risk findings

Review checks

  • Run X-ray before and after sanitization
  • Review removed active content
  • Keep original and sanitized artifacts separate

API

Endpoint family: /v1/security, /v1/forensics, /v1/jobs
POST/v1/documents/uploadPOST/v1/ocr/{document_id}GET/v1/jobs/{job_id}/downloadGET/v1/forensics/{document_id}/standards-preflightPOST/v1/forensics/{document_id}GET/v1/forensics/{document_id}/evidence-bundle
  • Security operations should use scoped API keys and idempotency where supported.
  • Destructive operations such as true redaction and sanitization should be followed by verification jobs.
Integration overview

Limits

Availability
Enterprise control
Readiness
private preview
Automation
Pipeline-ready

Confirm entitlement, input requirements, and deployment fit in the package and API documentation before you automate this capability.

Integration overview

Evidence

Browse proof

Evidence

Redaction verification

3 API

Evidence that sensitive text was removed from the generated PDF rather than covered by a visual overlay.

View proof

Evidence

Preflight reports

3 API

Standards, accessibility, metadata, and archival checks packaged as a reviewable publishing report.

View proof

Evidence

Evidence bundles

3 API

A packet of generated files, findings, screenshots, route history, and linked source documents for audits or handoffs.

View proof

Evidence

Storage governance reports

3 API

Provider health, signed URL decisions, object metadata, migration dry-runs, and checksum verification for workspace storage.

View proof

Public example workflows

Integration overview
Simple

Quick OCR and field check

Form W-9

Turn a scanned form into a searchable PDF and verify the obvious fields before routing it.

Proof artifacts

Searchable PDF, Field review notes

Complex

Compliance evidence pack

NIST Cybersecurity Framework 2.0

Preflight a standards PDF, inspect hidden structure, validate trust signals, route findings, and export an evidence bundle.

Proof artifacts

Preflight report, Trust verdict

Roles and use cases

Security teams

Security / IT

Control self-hosted processing, active content, and data paths.

Connected tools

JavaScript Control, Codec Policy, Trust Chain Validation

Review report: X-ray reportGenerated artifact: Parser diff scan

Legal and review teams

Legal Ops

Prepare evidence-ready PDFs and review packages.

Connected tools

Compare PDFs, Signature Center, Redact & Remove

Decision history: Compare review decisionsAudit record: Provenance ledger

Governance and compliance teams

Compliance / Audit

Validate standards, signatures, audit trails, and retention posture.

Connected tools

Standards Preflight, Trust Chain Validation, Retention + Redaction

Preflight report: Standards preflight reportVerification result: Trust-chain verdict