Redaction QA certificates

QA certificates are available on Firm and Enterprise. An organization admin enables QA certificates under Settings → Modules. Northdocs issues one automatically after a completed redaction on the standard PDF apply path, when verification of the base PDF finds no unexpected survivors.

What it records

Each certificate is tied to one immutable output version. It records input and output SHA-256 hashes, category counts, reviewer and approver identifiers, detector configuration, AI vendor, container and policy versions, residual risk, and the redaction verification algorithm. Intentional Keep decisions that remain in the file are accepted residual risk. They are not silent survivors.

The signed payload uses canonical JSON and an organization-scoped HMAC-SHA256 key. Download the PDF from the document Certificates panel or collect every certificate for a matter from the case Certificates tab.

Verify a certificate

1. Download the base redacted PDF without post-processing.
2. Hash it, and compare its SHA-256 value with the certificate.
3. Call the authenticated certificate verification URL printed in the PDF and confirm signatureValid is true.

Reapplying redactions creates a new output version and supersedes the prior active certificate. An editor can also reissue explicitly. Only organization admins can revoke an active certificate, and a reason is required. A revoked or superseded certificate remains in history. Its PDF shows the current status, while the original signed payload and HMAC stay unchanged.