Private AI · Runs on your Mac

Your client's return never leaves your desk.

Private AI for tax work. Redactax removes the client’s name, Social Security number, address and account numbers on your own machine — no upload, no server — so the numbers can go to ChatGPT or Claude and the client can’t.

Free for 5 documents a month · macOS 13+ · No account, no card

The whole workflow

Right-click. That's it.

No new app to learn, no folder to drag things into, no portal to log into. Redactax lives in the menu you already use, and gives you back a clean copy plus a record of exactly what it removed.

1040_2025.pdf Original
Form 1040 (2025)U.S. Individual Income Tax Return
NameJohn A. Smith
SpouseJane B. Smith
SSN123-45-6789
Address100 Main Street, Anytown FL
Refund toAcct ••5555 / RTG 123456789
Line 11 AGI$418,220
Line 15 TI$381,850
Sch E line 22($46,900)
Verification report
  • Names2 removed
  • SSN / TIN1 removed
  • Street address1 removed
  • Account & routing2 removed
  • Figures preserved147
Re-scan of output: no patterns detected

The numbers stay. That's the point — the model still needs them to be useful. What leaves is everything that says whose return it is.

Private AI

All of the AI. None of the exposure.

Redactax is how a tax professional gets a real answer out of ChatGPT or Claude without ever handing over who the client is — because the part that identifies them never leaves the Mac on your desk.

Private AI

The model reads the numbers, not the name

Every figure, schedule, basis calculation and carryforward reaches the AI intact, so the analysis is real. The name, SSN, address and account numbers never do. You get the answer you were after, and the client stays a stranger to the model.

On your computer

It lives on your Mac, not in a cloud

The model downloads once and runs locally. No server, no upload queue, no vendor holding your client files, no retention policy to go read. Pull the network cable and it still works — that isn't a promise, it's the architecture.

Time

Four minutes instead of forty

Right-click a 90-page return and it comes back clean in seconds, with a record of what was removed. Doing it by hand in Preview takes longer than the question was worth — which is why most preparers simply never ask it.

How it works

Detect, remove, then check its own work.

01 · DETECT

It knows what a 1040 looks like

Pattern matching finds SSNs, EINs, account and routing numbers. Form-aware field mapping does the rest — Redactax reads the form type and knows where the identifying boxes are, so it doesn't have to guess.

02 · REMOVE

The text is gone, not covered

Text objects are deleted from the file and the page is rewritten, along with metadata, annotations, embedded attachments and revision history. Scanned pages are redacted at the pixel. Nothing survives underneath.

03 · VERIFY

Then it re-reads the output

Redactax re-extracts the text from the file it just produced and runs every detector again. You get a verification report per document — and you can review and adjust every mark before anything is exported.

Local by design

Turn off your wifi. It still works.

The model runs on your Mac. There is no server to upload to, no queue, no processing account, no retention policy to read — because there's nowhere for the document to go. The only thing Redactax ever sends is a license check, and we publish exactly what's in it.

§7216

Tax return information is defined broadly, and disclosing it generally requires signed client consent. Removing the identifiers and keeping a record of it is a control you can actually point to. It isn't a workaround, and we don't sell it as one.

FTC Safeguards

Your WISP has to describe how client data moves and who touches it. "It never left the machine" is an easy sentence to write, and the verification report is the evidence sitting behind it.

Coverage

Built for the forms you actually send out.

Generic redaction tools look for patterns. Redactax knows the layout of the return, which is why it catches the name in the header of page 43.

1040
Individual, all schedules
1120-S
S corporation
1065
Partnership
K-1
All three variants
W-2 · 1099
Wage and information returns
State
Resident and non-resident
Scans
OCR for client-supplied paper
Statements
Depreciation, basis, carryforward
Pricing

One price. Everything in it.

No tiers to compare, no feature held back, no upgrade prompt six weeks in. Billed once a year, because your year has one season in it.

Try it $0 5 documents a month, free
  • 1040, W-2 and 1099
  • Full redaction quality — nothing crippled
  • Verification report included
  • No card, no account
Download
Founding 100 $99 $420 per year — locked for as long as you stay
  • Everything below, nothing withheld
  • Your price never goes up
  • Direct line to the founder
  • Your forms shape what we build next
Claim a spot
Standard $420 per year · $35 a month, billed annually
  • Unlimited documents
  • Every federal, state and entity form
  • Verification report on every file
  • Audit log and WISP appendix
  • Token map to re-hydrate AI answers
  • Updated form maps every filing year
Start free trial

$420 is roughly one billable hour, once a year. The subscription buys currency: IRS forms change annually, and the field maps that redact a 2026 return correctly are worthless against a 2028 one. More than one machine in the firm? Get in touch.

Questions

The ones every preparer asks.

Does this make it legal to use AI on client returns?

No, and be skeptical of anyone who says their product does. Redactax removes identifying information and documents what it removed, which is a meaningful control you can describe in your WISP and a much better position than pasting a full return. It does not substitute for your own judgment about §7216 consent, and it doesn't make us your advisor. Talk to your own counsel about where your line is.

What do you mean by "private AI"?

Two things, and the second is the one people miss. First, the redaction model itself runs privately — it's downloaded to your Mac and processes the document locally, so no third party ever sees the original. Second, what you send onward to ChatGPT or Claude carries no client identity: the figures are intact, the person behind them isn't in the file. You keep the capability of a frontier model and give up the exposure that normally comes with it.

How do I know it caught everything?

You review it. Every mark is shown side by side with the original before you export, and you can add or remove any of them. Redactax then re-reads its own output and re-runs every detector, and the result goes in the verification report. We publish our accuracy benchmark, including the misses — a tool in this category that claims perfection is telling you something about its marketing, not its engineering.

Does anything get uploaded?

The document, never. The model is downloaded to your Mac on install and runs locally, so redaction works with the network disabled. The app checks your license on launch and sends your license key and a hashed machine identifier — nothing else, and there's a 30-day offline grace period so you can work air-gapped through March.

What about Windows?

Coming for the TY2027 season. We know your production tax software probably runs there. Join the list from the download page and you'll get it first.

What happens to the numbers?

They stay. Names and identifiers are replaced with stable tokens — TAXPAYER_1, ENTITY_A — so the model can still track who's who across a 90-page return, and Redactax keeps the key locally to translate the answer back. Black boxes would break the analysis you're trying to run.

Who's behind it?

A practicing CPA who got tired of retyping numbers into a chat window to avoid pasting the return. Built for a real firm's workflow before it was sold to anyone else's.

Private AI, on your desk

Five documents a month, free, no account.

Download it, right-click a return you already have on your desk, and see what comes back. That's a faster evaluation than any demo we could give you.

macOS 13 Ventura or later · Apple silicon · 1.4 GB including the model

Palette preview