> ## Documentation Index
> Fetch the complete documentation index at: https://docs.open.cx/llms.txt
> Use this file to discover all available pages before exploring further.

# Redaction

> The Redaction API allows you to programmatically redact sensitive content from chat messages and sessions.

The Redaction API allows you to programmatically redact sensitive content from chat messages and sessions.
This is essential for compliance with data protection regulations like GDPR, CCPA, and HIPAA, enabling you
to remove personally identifiable information (PII) and other sensitive data when required.

## Overview

Redaction in our system enables:

* **Message-Level Redaction** - Redact specific messages by message ID, including any attached images or files
* **Session-Level Redaction** - Redact all messages in an entire chat session, including all attachments
* **Compliance Support** - Meet data protection requirements by permanently removing sensitive content
* **Audit Trail** - All redaction actions are logged for compliance and security purposes
* **Attachment Handling** - Automatically handles redaction of images and file attachments

## Security & Compliance

<Warning>
  Redaction is **permanent and irreversible**. Once content is redacted, it cannot be recovered. The
  original content is replaced with "\[REDACTED]" and all associated files are marked as deleted.
</Warning>

* All redaction actions are logged in audit trails without exposing the original content
* File attachments are removed from the message and marked as deleted
* Redaction events are tracked with timestamps, user information, and reasons
* Original content is never stored in audit logs for security

## Redact selected content in the dashboard

In a session, open a message's menu and choose **Redact Message**. The message and a live preview
appear together. Turn on **Redact entire message** to remove all its text and attachments. Turn it
off to return to your previous selections.

To keep the rest of the message:

1. Leave **Redact entire message** off.
2. Hover over a word to see that it is clickable, then click to mark it. Click again to unmark it,
   or drag across a longer passage to mark it in one gesture. Use **Select all text** to mark the
   complete body without selecting attachments. Double-clicking has the same effect as one click.
   With a keyboard, use the arrow keys to move between words and Enter or Space to toggle one;
   Control+A or Command+A marks all text. The preview updates as you mark content.
   Use **Clear text selections** beside **Select all text** to start again.
3. Check the images or files you want to remove. Text and attachment selections can be combined.
4. Compare the message with **After redaction**. Open **Add a reason (optional)** if needed, then
   click **Redact selection**.

Selected passages become `[REDACTED]`. Other text and unselected attachments remain. Removing
the last attachment from a message without text leaves a redaction placeholder.
You can select up to 100 passages and 100 attachments per action. If you exceed either limit,
adjust your selections before submitting; your draft stays available. Failed submissions also
keep your draft until you refresh the message.
You need permission to read sessions and the **Redaction** write permission to use these controls.

<Warning>
  Redaction cannot be undone. Affected stored originals, translations, and linked email copies
  are also handled. Original versions that cannot be safely edited are removed. If a message
  changes while the dialog is open, refresh and select again. A linked copy that differs may
  require reviewing that copy or using entire-message redaction.
</Warning>

Selective redaction supports ordinary text, formatted messages, emails, and their attachments.
Structured messages, including template cards, require **Redact entire message**. An image is removed
as a whole; selecting an area inside an image is not supported.

Removing an OpenCX attachment blocks new access to that stored file, including shared references.
Previously issued download links remain valid until their existing expiry. Copies already
downloaded, delivered to external recipients, or hosted elsewhere are not removed. Search results
update through the usual search synchronization.

These selective controls are available in the dashboard. The public API and MCP redaction tools
continue to redact entire messages or sessions.

## Available Endpoints

<CardGroup>
  <Card title="Redact Message" icon="message" href="/api-reference/redaction/redact-message">
    Redact a specific message by message ID
  </Card>

  <Card title="Redact Session" icon="comments" href="/api-reference/redaction/redact-session">
    Redact all messages in a chat session
  </Card>
</CardGroup>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.