A faint or noisy scanned page could be verified PASS even though the text check read nothing on it. Verification now also looks on every page for content the text check could not read, such as faint print, handwriting or a signature, and for text inside a checkbox or signature box. Until you review it, that content labels the export UNVERIFIED, and the report names the page. If this closer look reads an identifier that detection missed, such as a Social Security or card number, the export is labelled FAILED-DO-NOT-SEND. Identifiers you chose to keep visible are not counted against it. When you have looked at an area such as a signature or stamp and want it left as it is, choose Mark reviewed and drag around it. The area stays visible and the app does not check it for unread content: that review is yours. The report lists each reviewed area with its page and position, and a PASS says how many areas were left visible and not verified. Anything you chose to redact is still checked there. A page whose reviewed areas cover more than half of it is UNVERIFIED, and an export with reviewed areas cannot be certified with your certificate. Silo Redact now confirms its App Store purchase when it opens. If the check fails, the window says why and offers Try Again, which may ask you to sign in to the App Store. On a Mac where your purchase was already confirmed, a slow App Store no longer stops it from opening. After a FAILED-DO-NOT-SEND or UNVERIFIED result, the report now offers Start fresh review next to Back to review. It discards every finding and decision, manual box and reviewed area for that document and removes the export and the report, but keeps the imported PDF, so you can run detection again and review it from the beginning without importing it again. Before it detects or applies, Silo Redact now checks that its copy of your PDF still matches the file you imported, and stops instead of working on a copy that has changed. Your answer to the welcome screen and the detection profile you choose in Review are now remembered the next time you open Silo Redact. Silo Redact could also fail to open when another app was using the local port it picked; it now picks a free one.

A fillable form that was fully reviewed, such as a tax return, could fail verification even though every redaction was in place. Short values like "0", "12" or a state code were matched against the same characters printed elsewhere on the form, and the app's own name in the file information was mistaken for leaked text. Short values are now checked inside their own redaction boxes, so a correctly redacted form verifies, and a value the redaction really missed still fails. When verification does fail, the report now lists what survived, on which page, and which check found it, instead of only page thumbnails. Your review decisions are kept: choose Back to review, fix what the report names, and apply again. If you run detection again, every finding it finds again keeps the decision you already made. Buttons and highlights now use the rose-gold accent.

The welcome screen can now open the built-in sample document, a PDF filled with invented personal data, so you can run detection, review, redaction and verification from start to finish before importing a file of your own. "Import my own PDF" goes straight to the file picker instead. Once your Library has documents, the sample stays one click away in the Library header. Detection no longer goes online to check the domain of an email address. It now uses a domain list built into the app, so analyzing a document makes no network connection. On macOS 27, text recognition failed inside the app, so scanned pages found nothing and every verification report ended Unverified. Both work again. If a scanned page still cannot be read, detection now stops and says so instead of finishing with no findings. Silo Redact also has a new icon.

Silo Redact now preserves an existing export when a replacement save fails. A short write or save-panel failure leaves the prior file intact and reports the failure clearly, so a damaged partial export cannot replace a usable document. Redaction remains fully on-device, and every accepted result is still independently verified before it is presented as a certified export.

Driver's licence numbers, passport numbers and postal addresses were being found and then discarded. Silo Redact detected them, but no built-in profile listed them, so they were dropped before reaching your review list and the verification report still recorded a complete pass. All three are now redacted under PII — Standard, Financial documents and Medical records, and they can be switched on or off like any other kind. Contextual detection had the same fault and found nothing at all whenever a built-in profile was selected. It now works under every profile. The profile editor was also missing Dates, so a profile you built yourself could never enable them and its exports were permanently marked unverified. Every detection kind the app supports is now offered in the editor. Nothing is redacted until you approve it, and every suggestion must still be found verbatim on the page before Silo Redact will show it.

Introduces Cryptographic Redaction Certificates with statutory FOIA, HIPAA, and GDPR reason codes and SHA-256 destruction digests. Enhanced with safe recovery mechanisms and real pixel-level burn-in redaction running 100% on-device on Apple Silicon.

Five fixes you would have noticed. Checkboxes no longer break forms. On a PDF with checkboxes or radio buttons, Silo Redact treated each box's on/off state as if it were text: the review queue filled with meaningless findings you had to clear before you could apply, and accepting them could make the verifier report a survival that isn't there — quarantining a correctly redacted document as "FAILED-DO-NOT-SEND". Box states are no longer proposed as redactions. Text you type into a form field is detected exactly as before. Saving now proposes the real file name. Exporting a redacted PDF, a verification report, or a cleaned image offered an internal document ID instead of the name Silo Redact had already chosen, so a certified export could land on your disk as a bare identifier rather than "Contract-REDACTED.pdf". One page that failed to draw no longer blocks the rest. If a page render was interrupted — usually by turning the page before it finished — the review canvas stayed on "Could not render" for every remaining page until you reopened the document. Turning the page now recovers. Dismissing a Save dialog is no longer reported as an error. Cancelling from the verification report raised a red alert reading "cancelled"; a normal cancel is now silent, including for VoiceOver. An unverified export reads as unverified. Its banner was tinted the red reserved for a failed, do-not-send file. It now uses the amber review tone, matching its border and the rest of the app. Nothing about how redaction, verification, or privacy work changes: everything still runs entirely on your Mac.

Fixes a hang. Silo Redact inspects local ports when it starts and stops its on-device engine; if a network volume was unresponsive, those checks could block and the app would beachball on launch or when quitting. Those probes now run off the main thread with a hard time limit, and shutdown waits only briefly for the engine to exit. Nothing about redaction, verification, or privacy changes: everything still runs entirely on your Mac.

Closes a case where a redacted export could still contain readable text. On a filled PDF form, the review page rendered without the form's own field values, so the boxes covering them looked like they covered nothing — a reviewer would reject them, and the exported file was certified as clean while the original text was still recoverable. Form values are now shown during review, field text hidden behind an appearance stream is detected, and JavaScript attached to a bookmark is removed rather than reported as absent. Verification is also more honest: a document the detection pass never fully covered, or one checked without a working text reader, is now marked Unverified instead of being certified or condemned outright, and only proven leftover content produces a failed export. Large documents use far less memory during export.

New: Clean & Verify removes hidden data from a PDF or image — document info, XMP, embedded JavaScript and actions, attachments, page thumbnails, EXIF and GPS — then re-opens the result with independent checks and shows exactly what was removed, retained, and hashed. Your source file is never modified, and a clean that fails verification is quarantined instead of saved. Structured page-linked evidence still pairs exact source boxes, confidence and reason details, keyboard review, saved detection profiles, and a restart-safe, fail-closed apply workflow, and the certified PASS export remains independently verified.

• Cancel long AI detection or burn-in jobs right from the progress overlay. • "Saved to…" confirmation with Reveal in Finder after every export. • Copy SHA-256 chain-of-custody hashes with one click. • New "Keep all" to clear noisy detections in bulk.

Certify your redactions. After redacting a PDF you can now sign it on-device with a cryptographic PKCS#7/CMS signature (SHA-256) — no network and no account. Signing preserves the redacted bytes exactly and supports multiple signatures, so recipients can verify the document is precisely what you released.