Sanctum

Offline redaction · Word · PowerPoint · PDF

Share the document.
Not the secrets.

Sanctum finds the people, companies, emails and numbers in your files. You decide what goes. Then it re-reads the copy to prove they're gone, all on your own computer.

Download Sanctum Download for macOS Download for Linux See how it works

Free release candidate for Apple Silicon Macs and Linux. Other downloads

  • No uploads
  • No account
  • No network calls
  • Works offline
  • .docx
  • .pptx
  • .pdf

How it works

Open. Review. Prove it.

Three steps. The third is the one that matters.

  1. 01

    Open the file

    A contract, a deck or a PDF. Sanctum reads it on your machine. No upload, no account, no waiting on a server.

  2. 02

    Decide what goes

    Every person, company, email and number in one list, in plain language. Redact one, or all People in a keystroke. Names split across formatting or line breaks are caught as one.

  3. 03

    Save, and prove it

    Sanctum re-reads the redacted copy before it lets you have it. If anything slipped through, it refuses to save and fixes it in one click. Author, comments and tracked changes are stripped too.

See it

One studio for every format.

Word pages, PowerPoint slides with their speaker notes, real PDF pages. Same findings list, same shortcuts.

Sanctum reviewing a Word agreement between Scrooge & Marley and Pemberley Estates: findings list on the left, the document in the middle, the selected finding on the right.
Sanctum reviewing a PowerPoint deck for Jay Gatsby, with findings grouped by slide and speaker notes under each slide.
Sanctum reviewing a PDF letter from Holmes & Watson about Carfax Abbey, on its real page with a thumbnail.

Who it's for

For documents that travel further than the people in them should.

Lawyers

Share a precedent or a draft without sharing the client in it.

Consultants

Reuse last year's deck without last year's client, or their notes.

Anyone using AI

Give a contract to an AI assistant without giving it the names.

Download

Get Sanctum.

Free while it's a release candidate. It can still miss a name, so always look over the findings before you send.

First run

The builds are unsigned for now, so your system asks you to confirm the first time you open Sanctum. That is expected.

macOS

macOS may say Sanctum "is damaged and can't be opened". It isn't damaged, it just isn't signed by Apple yet. Two minutes, once:

  1. Open the downloaded .dmg and drag Sanctum Desktop into the Applications folder.
  2. Open Terminal: press ⌘ Space, type Terminal and press Return.
  3. Click the line below to select it, copy it with ⌘ C, paste it into Terminal with ⌘ V and press Return. 
    xattr -d com.apple.quarantine "/Applications/Sanctum Desktop.app"
    Nothing is printed when it works. That's normal.
  4. Close Terminal and open Sanctum from Applications as usual.

Do this again after downloading a new version. If macOS instead says the app "cannot be verified", you can skip Terminal: try to open it once, then go to System Settings → Privacy & Security, scroll to the bottom and choose Open Anyway.

Apple Silicon Macs only; there is no Intel build.

Linux

chmod +x Sanctum-Desktop-x86_64.AppImage
./Sanctum-Desktop-x86_64.AppImage

Missing FUSE? Install the .deb instead, or run it with --appimage-extract.

Windows

Windows may say "Windows protected your PC". That is SmartScreen noticing the installer isn't signed yet. Once:

  1. Click More info.
  2. Click Run anyway.

Sanctum installs for your user only, so it doesn't need admin rights. A work computer managed by IT may block unsigned installers altogether; if there is no Run anyway button, ask IT, or wait for the signed release.