BASALT · JOURNAL
How to redact donor records in a PDF
Donor reports can include names, addresses, giving history, payment details, employer information, and private notes. A board, auditor, or campaign team may need totals without a full donor roster.
Prefer aggregate reporting
Use totals, ranges, and categories when individual identities are not needed. If a PDF must contain rows, keep only fields relevant to the review and establish a consistent pseudonym scheme when appropriate.
Review tables and attachments
Search donor names, emails, phone numbers, account IDs, and card fragments in text, charts, scans, and embedded spreadsheets. Inspect comments and metadata for internal notes or export paths.
Verify the board or auditor copy
Export a separate file, search for known donor values, inspect page images and attachments, and compare the totals that must remain. Keep the original fundraising report under restricted access.
Frequently asked questions
Should donor names be visible to a board?
Follow the nonprofit’s policy and the donor’s consent. Aggregate information is often sufficient.
Are giving totals personal information?
They can be, especially when combined with identity or location. Minimize them to the purpose.
Can a chart identify a donor indirectly?
Yes. Labels, small groups, and notes can reveal identity even after names are removed.
Doing it in Basalt
Basalt handles donor-report redaction on-device and verifies text, charts, OCR, and attachments before delivery. Download Basalt.
Redaction that proves itself
Basalt destroys the content you mark, then re-opens the file it wrote and proves the content is gone before it saves anything. Your documents never leave your Mac.