Redaction QA certificates

Export

2 min read

Issue, verify, download, supersede, and revoke signed evidence for completed redactions.

QA certificates are available on Trial, Firm, and Enterprise. Northdocs issues one automatically after a completed redaction passes fail-closed verification.

How it works

Pending check

Unreviewed suggestions warn before download.

Markings

Watermark, page numbers, exhibit stamp, appendix.

Verify

If flagged text survives, the file stays here.

A certificate matches only the exact bytes of the base verified redacted PDF. Watermarks and rasterize change the hash.

What it records

Each certificate is tied to one immutable output version. It records input and output SHA-256 hashes, category counts, reviewer and approver identifiers, detector configuration, AI vendor, container and policy versions, residual risk, and the redaction verification algorithm.

The signed payload uses canonical JSON and an organization-scoped HMAC-SHA256 key. Download the PDF from the document Certificates panel or collect every certificate for a matter from the case Certificates tab.

Verify a certificate

Download the base redacted PDF without post-processing.
Hash it, and compare its SHA-256 value with the certificate.
Call the authenticated certificate verification URL printed in the PDF and confirm signatureValid is true.

Reapplying redactions creates a new output version and supersedes the prior active certificate. An editor can also reissue explicitly. Only organization admins can revoke an active certificate, and a reason is required. A revoked or superseded certificate remains in history. Its PDF shows the current status, while the original signed payload and HMAC stay unchanged.

Still need a hand?

Help center