BASALT · JOURNAL

Flattening a PDF is not the same as redacting it

2026-09-21 · flatten pdf vs redaction

Flattening usually takes an interactive appearance—a form field or annotation—and makes it part of the page presentation. Redaction removes information. The two operations can look identical on screen while producing very different security results.

What flattening is useful for

Flattening can lock the visible appearance of completed form fields, signatures, stamps, and comments so recipients see the intended rendering without needing compatible interactive features. It is helpful for distribution consistency and can simplify later page processing.

But implementations vary. Some preserve the original field dictionary or annotation data; others create a new page appearance without removing unrelated content beneath it.

Why a flattened black box can fail

Suppose a reviewer draws a black rectangle over a name and flattens the annotation. The rectangle becomes permanent page artwork, but the text-showing operation below it can remain. Copy-and-paste, search, or text extraction reveals the name.

The same problem applies to a form field that displays an empty value while the prior value remains stored, or an annotation whose comment contents survive after its appearance is painted.

Where flattening belongs

Resolve form and annotation appearances according to the release plan, clear their stored values, apply true redactions to underlying text and images, then sanitize and verify. If flattening occurs after redaction, reverify the final bytes because a new PDF was written.

To test a questionable file, try text extraction, inspect form fields and annotations separately, and look for objects beneath each black region. Why a redacted PDF still shows text provides the user-level checks.