Can Copilot redact PDFs?

The short answer: no. As of October 2026, none of Microsoft’s support or Learn pages for Copilot describe a feature that redacts a PDF: one that deletes the text under a black box and gives you back a clean file. That holds for the Copilot app, Microsoft 365 Copilot (which Microsoft now calls Microsoft Copilot at work), Copilot in Edge, and Copilot in Word. Copilot reads documents. It does not redact them.

What Microsoft documents Copilot doing with a PDF

Each of these comes from Microsoft’s own pages. Read them for your version, because Copilot changes often.

• The Copilot app. You can attach a PDF to a chat and ask questions about it, such as a summary. PDF is on the supported list. (File upload in Microsoft Copilot)
• Copilot in Edge. Copilot can use what is open in the current tab, a web page or a PDF, to answer you, when your organization allows it. (Using Microsoft Copilot in Edge at work)
• Copilot in Word. You select text and Copilot offers a rewritten version, which you can use to replace the selection. (Transform your content with Copilot in Word)
• Microsoft 365 Copilot at work. Copilot answers from documents, email, and chats you already have permission to see. (Data, Privacy, and Security for Microsoft Copilot)

Reading, summarizing, rewriting. None of those pages mention redaction. One related item: Adobe announced an Acrobat extension for Copilot that lists redaction as a task. That is Adobe’s tool running inside Copilot, not a Microsoft feature, and the announcement does not say where your file is processed. Check Adobe’s own documentation before you use it for regulated work.

Why “redact this for me” in a chat is not redaction

You can still type “remove the names from this PDF” into Copilot, and it will answer. Here is what you get back.

• The file is untouched. The PDF you attached still has every name in it. If you send that file on, nothing was removed.
• A retyped copy is not the document. A court, an agency, or a client usually needs the original pages with the sensitive parts removed, not a model’s retelling of them.
• You cannot easily check what it missed. A model can skip the third mention of a name or change a figure it was meant to leave alone. Microsoft says its AI output is not guaranteed to be accurate and asks you to review it before you share it (same Learn page).
• Rewriting in Word is a writing tool. Microsoft describes it as rewriting text you select. That page says nothing about finding every place a name appears, or about metadata, comments, or tracked changes.

Real redaction deletes the text from the file itself. A black box drawn on top is not enough either: see how to redact so the text is actually gone.

The bigger problem: the unredacted file already went to Copilot

To ask Copilot to redact a document, you first have to give it the whole document. So the names, account numbers, and case details are in Copilot before any redaction starts. Here is what Microsoft says happens to them.

• The Copilot app keeps uploaded files “for a short time (no longer than 18 months),” then deletes them (file upload page). By default it stores conversation activity for 18 months (Privacy FAQ for Microsoft Copilot).
• Microsoft 365 Copilot at work stores your prompts and its responses as your Copilot activity history, and your admins can search it with Microsoft Purview. Microsoft says these are not used to train its foundation models (Data, Privacy, and Security for Microsoft Copilot).
• Copilot in Edge can use the PDF open in your tab, and that content may be stored under your organization’s data policies (Edge at work page).

On model training, Microsoft’s consumer pages read differently from each other. The file upload page says the content of files you upload is not used for training. The Privacy FAQ describes training on conversation activity, which signed-in users can opt out of. Read both for the version you use.

None of this means Microsoft is careless. It means the raw file now lives in one more place, under someone else’s retention rules. For a client file, a medical record, or a tax return, that copy is the thing you were trying to avoid.

The safe order: redact first, then give Copilot the clean copy

You can still use Copilot to summarize or draft from a sensitive PDF. Change the order, so the sensitive parts are gone before Copilot ever sees the file.

1. Open the PDF in KeptPDF’s redact tool. It runs in your browser, on your device. The file is not uploaded.
2. Review what it finds. It flags names, Social Security numbers, emails, phone numbers, addresses, account and routing numbers, and dates. Add anything it missed. Auto-detection is a first pass, so check each one.
3. Apply and download. KeptPDF deletes the text under each mark, clears the document’s hidden metadata, then re-opens the finished file to check that no text is left under the marks.
4. Give Copilot the redacted copy. Attach that file, or open it in Edge. Copilot can still summarize it. The details you removed never reach it.

If Copilot needs to tell people apart (who paid whom, who said what), black boxes get in the way. Anonymize for AI swaps each name for a consistent placeholder like [PERSON_1] instead, so the document still reads clearly. The longer walk-through for any assistant is how to redact a PDF before pasting it into ChatGPT or Claude.