A loan application PDF has your full SSN at the top of every page. The bank's processor needs to verify your identity but the loan officer's intern doesn't need to see all nine digits. Redact before forwarding.
What to redact
Standard practice in the US: redact all but the last four digits. So XXX-XX-1234 rather than the full number. Last-four is enough for verification in most contexts; full SSN is enough for identity theft.
For extra-sensitive contexts (medical records shared internally, tax documents sent externally), redact the full number unless there's a specific need to see it.
How to redact in Flint
Open the PDF in Flint's redaction tool. Mark each instance of the SSN. Flint removes the underlying text and image data, replacing the area with a redaction marker.
For multi-page documents (loan packets, tax returns), redact every page. SSNs often appear on headers, footers and audit logs as well as the main form.
Verification
After redacting, open the output PDF, select-all on each redacted region and try to copy. If anything pastes (especially the redacted SSN), redaction failed.
Also check the file metadata — sometimes SSNs appear in document properties or attached form data. Strip metadata as part of the workflow.
FAQ
Is partial redaction (last four) safer than no redaction?
Much. Last-four-only is enough for verification but useless for identity theft. Use it as the default for internal forwarding.
What about other identifiers?
Same principle for full credit card numbers (mask all but last four), driver's license, employee ID. Redact the parts that aren't needed for the specific recipient's purpose.
Do I need to redact SSN in encrypted documents?
Encryption protects the file from unauthorised access. Once decrypted, the SSN is visible. Redact if the legitimate recipient doesn't need to see the full number.
Does Flint detect SSNs automatically?
Flint's redaction tool lets you mark regions manually. For bulk SSN detection, an automated PII tool can run as a first pass — always verify manually before release.
SSN exposure is the #1 driver of identity theft. Redact properly before any forwarding.