Safe means rebuilt and checked.

Drawing a black rectangle over a PDF can leave the underlying text recoverable. SafeShare’s beta rebuilds PDFs from sanitized page pixels and verifies the new structure before download.

Local processing boundary

Parsing, detection, review, sanitization, and verification happen in a dedicated browser worker. SafeShare has no file-processing upload endpoint.

Visible coverage

Every detector reports whether it is supported, experimental, unavailable, or skipped. Missing OCR or visual coverage produces a warning instead of a verified claim.

Responsible disclosure

Report recoverable redaction, file-derived network transmission, detector-integrity bypass, or sensitive diagnostics through the anonymous report form. It reaches a monitored inbox without requiring an account, so you may disclose without identifying yourself. Describe the reproduction steps rather than attaching real sensitive files.

Research boundaries

Use synthetic data, avoid disruption or accessing other people’s information, and stop when enough evidence exists. The intended response targets are three business days for acknowledgment and seven business days for initial triage after the final contact opens.