Security and privacy
Offline by design, verified at every export
Documents you redact are, by definition, documents you cannot afford to leak. Obscelis is built so that they never leave your computer and so that each redacted copy is checked before you can share it.
Nothing leaves your computer
Obscelis needs no account and works offline: import, detection, review and export run on your computer, and nothing about your documents is ever sent. Detection rules and OCR language data ship with the application. The network serves only the license (activation, the trial, and a check at most once a day or when you display it in the settings, with the key and a fingerprint of the computer, never a document) and the optional detection model, downloaded when you ask for it in Settings from latelierdu.dev and checked against its SHA-256 fingerprint before use. There is no telemetry.
Originals are never modified
An imported document is only read. Obscelis works on a private copy and writes each export to a new file, in a location you choose, through a temporary file renamed only once every check has passed.
Removal, not an overlay
Exported PDF pages are flattened after your decisions are applied, so no text, image or vector survives under a masked area. Text, Word, Excel and PowerPoint files have each masked character replaced by █ in the copy; an image has its masked areas painted black, and its metadata removed.
Every copy is reread
The output is closed and reopened through an independent read path. If a single masked value can still be found, the export is refused and the file deleted; it is never presented as a partial success.
An audit report without the data
Each export comes with a report of what was masked, by which rule and on which page, and which checks passed. It uses neutral labels such as NAME-1 or IBAN-1 instead of the values.
Protected at rest
Projects live in a local database on your computer. Detected values are never stored there in plain text, and never written to logs, thumbnails or crash reports.
What the verification looks for
After each PDF export, before the copy is kept:
- Text extraction finds none of the masked values
- OCR of the masked areas finds none of them either
- No hidden, white or off-page text remains
- No annotation, form field, layer or attachment remains
- Metadata (author, subject, keywords, software) is cleaned
- The original file is unchanged
Logs that say nothing about your documents
Diagnostics record only what is needed to fix a problem: a random project identifier, the stage, its duration, the page count and an error code. Never extracted text, detected values, file names or full paths.
What Obscelis does not promise
- A detection is a proposal. A person reviews each one; Obscelis never masks anything on its own.
- Signatures, faces, handwriting and stamps are not detected automatically. Draw a zone over them.
- No software can guarantee that a document is anonymous: what remains may still identify someone. Obscelis tells you which checks it ran so you can judge.
- Using Obscelis does not by itself make an organisation compliant with the GDPR or any other regulation.
What Obscelis is made of
The software bill of materials lists every component of the three applications: the Rust crates of the shared core, the packages of the Windows application, the native libraries, the OCR language data and the detection model, each with its version, licence and fingerprint. The components are checked against public vulnerability databases before each publication.
CycloneDX 1.5, JSON, 121 kB · SHA-256 ba590060…69edb9af
The file names components, versions, licences and download addresses only: nothing about the people who use Obscelis or their documents.
- Checked on 30 September 2026, version 0.1.0
- 239 Rust crates, 17 NuGet packages, 27 native libraries, data files and model files
- No known vulnerability in the 261 crates of the core's lock file, test tools included (cargo-audit 0.22.2, RustSec database of 29 September 2026)
- No known vulnerability in the 17 NuGet packages of the Windows application (OSV.dev)
- Notice: paste 1.0.15 is no longer maintained (RUSTSEC-2024-0436)
Licences
| Licence | Components |
|---|---|
| Apache-2.0 OR MIT | 170 |
| MIT | 36 |
| Apache-2.0 | 18 |
| Apache-2.0 OR MIT OR Zlib | 8 |
| BSD-3-Clause AND Apache-2.0 | 7 |
| Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | 4 |
| MIT OR Unlicense | 4 |
| Apache-2.0 OR BSD-2-Clause OR MIT | 2 |
| Apache-2.0 OR BSD-3-Clause | 2 |
| Apache-2.0 OR LGPL-2.1-or-later OR MIT | 2 |
| BSD-3-Clause | 2 |
| ISC | 2 |
| Zlib | 2 |
| (Apache-2.0 OR MIT) AND BSD-3-Clause | 1 |
| (MIT OR Apache-2.0) AND Unicode-3.0 | 1 |
| 0BSD OR Apache-2.0 OR MIT | 1 |
| Apache-2.0 OR BSL-1.0 | 1 |
| BSD-2-Clause | 1 |
| BSD-3-Clause OR MIT | 1 |
| CDLA-Permissive-2.0 | 1 |
| Not recorded in the NuGet lock file | 17 |
Try Obscelis for 30 days
Download it for macOS, Windows or Linux: the trial needs no account and no card. A question, or a demonstration for your team? Write to us.
contact@latelierdu.dev
Opens your e-mail app. We only use your address to reply.