Subject access requests, answered on time with every redaction accounted for.

Redactrr reads the whole export, finds every other person in it and lets you decide each name once for every file. It tracks the statutory deadline and builds the redacted disclosure pack, all in your web browser. The documents are never uploaded.

Get started

Documents never uploaded Nothing to install Sign-off on every case From £66.67 per user a month

Redactrr review screen: an investigation report with other people's names highlighted for redaction and the requester's details kept

The real app in a browser, with a sample case. Every person in it is invented.

1 monthStatutory deadline worked out for every case, weekends and bank holidays included

11Kinds of personal data found, from names to NI numbers and bank details

9File formats read, including Outlook .msg, Word and scanned images

0Documents uploaded. Every file is read and redacted inside your browser tab

Review

Decide a person once. It applies in every file.

An export can hold the same colleague hundreds of times. Redactrr groups every occurrence under one name, so one decision redacts them all. You can still override a single occurrence where context matters.

Bulk decisionsRedact every phone number, or every high-confidence name, in one step.

The requester stays visibleTheir own name, email and details are recognised and kept, so you disclose what's theirs.

Draw over anything missedBox out a signature or a photo by hand, and it's redacted like the rest.

One person, Mark Evans, with every occurrence across seven files and a single Redact decision

Deadlines

Every request on one screen, sorted by when it's due.

The dashboard shows what's overdue, what's due this week and who is working on it, for everyone in your workspace. Extensions are recorded with the reason, and the new date is calculated for you.

The one-month rule, applied properlyMonth-end dates and bank holidays handled, for England and Wales to the end of 2028.

Assign and trackGive each case to a reviewer and see its progress at a glance.

Dashboard of subject access requests with deadlines, status and review progress

Try it

When is your request due?

One calendar month from the day you received it. If that date doesn't exist, it's the last day of the month. A deadline on a weekend or bank holiday moves to the next working day.

Request received on

Respond by

–

–Standard deadline

–Extended 1 month

–Extended 2 months

Sign-off

Check, review and sign off. Add a second approver if you need one.

The person who reviews a case confirms every detection has a decision and signs it off, and their statement goes into the audit record with their name and the time. If your organisation wants a second pair of eyes, switch on second-person approval and nobody can approve their own work.

Nothing slips throughA case can't be signed off while any person or identifier is undecided.

Know where to lookThe confidence dashboard lists the medium and low confidence matches to check by eye before you sign off.

Check before you submitDownload a redacted draft of any file to see exactly what will be sent.

Sign-off page: 118 redactions, 0 undecided, and the sign-off statement

Confidence

See how sure detection was, before you sign off.

Every case has a Confidence tab: how many people and identifiers were found with high, medium and low confidence, how much of each is decided, and a list of the uncertain matches to check by eye.

Confidence tab: high, medium and low confidence detections, with decisions by type

Export

One download. Two folders.

The first goes to the requester. The second stays with you as the record of how the request was handled. Redacted PDFs and images are flattened, so the text under a box is gone, and every page is stamped with the case reference.

disclosure-pack/Send this to the requester

_Covering letter - DSAR-2026-0142.docxLetter
employment-file_redacted.pdf12 pages
inbox/RE Absence review_redacted.emlEmail
scanned-interview-note_redacted.pngOCR
_page-index.csvIndex

internal-audit/Keep this as your record

review-decision-log.csvWho decided what
detection-report.csvEvery occurrence
redaction-reasons.csvLegal basis
audit-trail.csvFull history
manifest.jsonWhat was sent

Trust

The documents never leave your browser.

Text extraction, OCR, detection and redaction all run inside your browser tab, and there's no AI. Redactrr never receives the files. Only the case record is saved online: case details, decisions, deadlines, the correspondence log and the audit trail, in a database for your organisation alone, in EU data centres.

Your export→Redactrr in your browser→Disclosure packDocument upload

Documents aren't storedFiles are read in your browser's memory while you work. Decisions and the audit trail are saved, not copies of the documents.

Redactions can't be reversedPDFs and images are rebuilt as flat pages, so hidden text can't be copied back out.

Held in the EUCase records sit in Cloudflare's EU data centres, under EU jurisdiction, and every connection uses HTTPS.

Locked-down accountsSalted password hashes, a pause after five wrong attempts, 12-hour sessions and optional single sign-on.

Pricing

Simple pricing, per user.

Unlimited cases, files and exports on every plan. Paid by Direct Debit, cancel any time.

Features

Everything a subject access request needs.

Built for HR and data protection teams who answer requests themselves and need to show their working.

Deadlines you can't miss

Every open request sorted by due date, with overdue and due-this-week counts at the top. Extensions are recorded with a reason.

Reads what you've gathered

Load a folder or zip as it comes out of your systems. It's read in your browser, and nothing needs converting first.

PDFWordOutlook .msg.emlHTMLCSVJSONTextScans (OCR)

Finds other people's data

Each detection has a confidence level, so you know where to look hardest.

NamesEmailsPhone numbersPostcodesAddressesNI numbersPayment cardsBank detailsDates of birthIP addressesReferences

A built-in document viewer

See each document as it will be sent. Switch to the redacted view to check exactly what the requester gets.

Bulk and keyboard redaction

Decide by type and confidence in one step, or work through a case from the keyboard. Override single occurrences when context matters.

Reasons on every redaction

From third-party data to legal professional privilege, citing the Data Protection Act 2018. Reasons flow into the covering letter.

Sign-off your way

The reviewer checks and signs off in one step, or switch on second-person approval so a different person must approve.

Confidence dashboard

See how sure detection was for each case: high, medium and low confidence, how much of each is decided, and a list of the uncertain items to check by eye.

The disclosure pack

Redacted files with page stamps, a Word covering letter, a page index, and the internal audit record, in one zip.

One workspace for the team

Everyone signs in at your workspace address from any computer and works on the same cases. Every change goes into the audit trail.

People and roles

Everyone gets the access they need, and no more.

Add colleagues with a temporary password and they choose their own the first time they sign in. Or switch on single sign-on and they use their work account.

ViewerSees every case and the reports. Changes nothing, for example your DPO.

ReviewerReviews cases assigned to them and submits them for approval.

ApproverAssigns work, extends deadlines and approves other people's reviews.

AdminEverything, plus people, settings, single sign-on and billing.

Team casesOn by default: everyone in the workspace can see and work on the same cases, within their role.

Sign-inPasswords, or single sign-on with Microsoft 365, Google Workspace or any OIDC provider.

UsersYou pay per user. Admins add people under Billing whenever they need to.

Security and privacy

Built so sensitive records stay where they are.

A subject access request often holds the most sensitive records you have. Redactrr reads them in your browser and never uploads them.

No document uploads. No AI.

Extraction, OCR, detection and redaction all run inside your browser tab, on the computer you're using. The documents are never sent to Redactrr. What's saved online is the case record: case details, decisions, deadlines, the correspondence log, the audit trail and user accounts. It's held in a database for your organisation alone, in Cloudflare's EU data centres under EU jurisdiction.

Documents aren't storedFiles are read in your browser's memory while you work on a case. Decisions, deadlines, correspondence and the audit trail are saved, not copies of the documents.

Redactions can't be reversedRedacted PDFs and images are rebuilt as flat page images, so the text under a box is gone.

Encrypted in transitEvery connection to your workspace uses HTTPS. Plain HTTP isn't offered.

A record of every stepWho loaded what, who decided each redaction and why, who approved and when the pack was built.

Individual accounts

Everyone signs in with their own account. Passwords are stored as salted PBKDF2 hashes, and temporary passwords must be changed at first sign-in.

Brute-force protection

Five wrong passwords pause sign-in for that account for 15 minutes.

Sessions that end

Sessions last 12 hours. Resetting a password or disabling an account signs that person out straight away.

A database of your own

Each organisation's case records live in a database for that organisation alone, held in the EU and never shared with another customer.

Single sign-on

Sign in with Microsoft 365, Google Workspace or any OIDC provider. Switch it on during first-time setup, or later under Settings.

Separation of duties, if you want it

Switch on second-person approval and the person who reviews a case can't approve it. Every approval then names a second person.

Pricing

One price per user. Unlimited cases, files and exports.

Pay for the people who use Redactrr. There are no limits on how many requests you handle, how many files you load or how many disclosure packs you build. Pay by Direct Debit and your workspace opens straight away.

Users	Monthly	Yearly	Yearly saves

Questions

Pricing questions

Who counts as a user?

Everyone with their own Redactrr sign-in, whatever their role: reviewers, approvers, admins and viewers such as your DPO.

Is anything limited?

No. Every plan includes unlimited cases, unlimited files and unlimited disclosure-pack exports, and every feature.

Where does it run?

In your web browser: Chrome, Edge, Firefox or Safari. Everyone signs in from any computer at your organisation's workspace address, such as yourdomain/w/your-company. There's nothing to install.

How do I get started?

Choose monthly or yearly and set up a Direct Debit. Your workspace opens as soon as the Direct Debit is in place, and you get a one-time link to first-time setup, where you create the admin account and can switch on single sign-on.

How do I log in after paying?

After setting up your Direct Debit you get your workspace address. Log in any time at /login or bookmark your workspace address.

How do I pay?

By Direct Debit through GoCardless, monthly or yearly. There's no card to enter and nothing to renew by hand.

Can I add users later?

Yes. An admin adds users at any time under Billing inside Redactrr. You pay for the rest of the current period for the extra users, then the new amount from the next payment.

Can I cancel?

Yes, any time, from Billing inside Redactrr. You keep access to the end of the period you've already paid for.

What if a payment fails?

There's a 14-day grace period, so your team keeps working while the Direct Debit is sorted out.

Can I switch from monthly to yearly?

Yes. Contact us before your monthly period ends and we'll move you across without a break.

Where is our data held?

Case records are held in Cloudflare's EU data centres, under EU jurisdiction, in a database for your organisation alone. Documents aren't held anywhere: they're read and redacted in your browser and never uploaded.

What about more than 500 users?

For more than 500 users, or if you need special terms, contact sales and we'll put together a quote.