No, and this matters. It flattens annotations and form values and strips metadata, but the original page text stays selectable and extractable in the exported file. Paperlatch has no redaction feature. Do not use it to hide text you need hidden.
It refuses rather than silently sanitizing when a PDF contains embedded files, JavaScript, an OpenAction, additional actions, a Launch action, or XFA forms. Failing closed is deliberate.
The vault is encrypted with a key stored in your Keychain marked “this device only.” The encrypted data restores, but the key does not, by design. Paperlatch detects this and tells you rather than showing an empty vault. Vault contents cannot be recovered on a new device.
No. The scanner is compiled out on Mac Catalyst, and Paperlatch requests no camera entitlement there.
Imported PDFs must be 250 MB or smaller and must begin with a %PDF- header. Files shared into the app are auto-deleted after 48 hours, or once shared imports exceed 500 MB in total.
No. There is no remote signing, identity verification, certificate of completion, or legally managed audit trail.