Redactor Desk is a desktop client for Claude: chat and work in code while secrets, credentials and personal data are replaced by placeholders locally before anything reaches the model API. Only real values ever touch disk — never a placeholder.
The agent's tool surface has no path around redaction. Every prompt, every file's contents and every search result passes the same local redaction layer before it reaches the model — and the real values are restored only locally.
Everything model-bound passes sanitize(); everything the model writes passes restoration before it lands on disk or in the chat.
The agent has no shell access and no built-in tools — just five redacted file operations. There is simply no channel that leads out unsanitized.
The same value always maps to the same stable placeholder (__REDACTED_…__). The model reasons coherently in placeholders; you see the real values locally.
Plan mode is read-only; changes require a deliberate switch to Build mode. A backup is written before every change.
Paste an error with a token — Redactor Desk tokenizes it before the message is sent. Claude answers over the placeholder; the reply is restored locally. When writing to a file, real values land on disk, never a placeholder.
The redaction engine is identical and full in both editions — protection is never hidden behind a paywall.
Full redaction · for individuals & consultants
Free · macOS (Apple Silicon) · signed & notarized · checksums
Volume licensing · for regulated organizations
For regulated organizations (NIS2, DORA, AI Act) that want to clear agentic coding at all — and for consultants working with sensitive client data. We support your controls; we don't claim to "meet" them.
Honest stays honest.
Detection is deterministic and heuristic (regex, checksums, entropy). What isn't detected isn't replaced — which is why regulated organizations pair Redactor Desk with clear policy and training. "Fully offline" applies to detection and tokenization; the client itself, by nature, talks to the Anthropic API. More on the security page.
We'll show Redactor Desk on your real use case — and what adoption looks like in a regulated organization.