GoCalma
GoCalma is free, open-source software for detecting and redacting sensitive information in PDF files directly in a browser.
What GoCalma is
GoCalma is free, open-source software for detecting and redacting sensitive information in PDF files directly in a browser. It identifies more than 30 PII types and validates checksums across more than 10 European identity-document formats. Users can apply redaction, masking, hashing, highlighting, or synthetic replacement by information type, then review each candidate with its strategy, pattern, and confidence. OCR for scanned or image-heavy PDFs runs locally. Listed compliance profiles include Swiss DPA, EU GDPR, Healthcare, Financial, and Full Scan. An encrypted .gocalma recovery key can restore the original document later with the matching key. The repository says parsing, detection, OCR, redaction, and restoration stay in the browser, while sensitive key payloads use AES-GCM encryption and redaction removes PDF author, title, and timestamp metadata. A design-level audit finding concerns raw key storage without a password. The Vercel demo uses regex detection only because model files exceed its 250 MB limit.
Good
- Processes PDF contents locally in the browser
- Detects more than 30 PII types
- Multiple redaction and masking modes
- Local OCR for scanned PDFs
- MIT-licensed open-source software
Watch out
- Raw key storage when no password is set
- Vercel demo uses regex detection only
- Requires Node.js, npm, and a modern browser
- PDF input only
Who it suits
GoCalma suits users who need local, browser-based PDF PII handling and organizations using its listed compliance profiles. Local setup requires Node.js 18 or later, npm, and a modern desktop browser.
Verdict
GoCalma offers broad local PDF detection and several ways to transform flagged data. Review its key-storage caveat and deployment limitation when choosing between local setup and the demo.
Plans and prices
From GoCalma's own pricing page, checked 9 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Open-source | Free | Browser-based PDF redaction; repository provides local setup instructions |
The facts
Each one read from GoCalma's own pages, with the date it was checked.
What it does
- Compliance profiles
- The listed profiles are Swiss DPA, EU GDPR, Healthcare, Financial, and Full Scan.checked 9 Oct 2026
- Deployment limit
- The repository says its Vercel demo deployment uses regex-based detection only because the NER model files are too large for Vercel's 250MB limit.checked 9 Oct 2026
- Detection review
- Users can review detected candidates and see why each was flagged, including strategy, pattern, and confidence.checked 9 Oct 2026
- Languages
- The listed interface and OCR languages are English, German, French, Italian, and Spanish.checked 9 Oct 2026
- License
- The software is distributed under the MIT License.checked 9 Oct 2026
- PII detection
- The repository says GoCalma detects more than 30 PII types and validates checksums across more than 10 European ID formats.checked 9 Oct 2026
- Privacy
- The repository says PDF parsing, detection, OCR, redaction, and restoration happen locally in the browser, and plain document content is not sent to external servers.checked 9 Oct 2026
- Purpose
- GoCalma detects and redacts sensitive information in PDFs in the browser without sending document contents to a server.checked 9 Oct 2026
- Redaction modes
- Users can choose redact, mask, hash, highlight, or synthesize modes by PII type.checked 9 Oct 2026
- Reversible redaction
- Users can export an encrypted .gocalma recovery key and later restore the original document with the matching key.checked 9 Oct 2026
- Scanned PDFs
- The app runs OCR locally for image-heavy or scanned PDFs.checked 9 Oct 2026
- Security
- The repository states that .gocalma key payloads use AES-GCM encryption and that redaction scrubs PDF author, title, and timestamp metadata.checked 9 Oct 2026
- Security caveat
- The repository's audit summary reports a design-level finding: raw key storage when no password is set.checked 9 Oct 2026
- Setup
- The repository's local setup instructions require Node.js 18 or later, npm, and a modern desktop browser.checked 9 Oct 2026
Alternatives to GoCalma
- 1
GroupDocs.Redaction
AndroidiOSWebAPI7.6$1,999 usage-based - 2

Redactable
Free planWebAPI7.4From $19 a month - 3

RedactLaw
Free planWebAPISelf-hosted7.4From $39 a month - 4
Docuflair Redact
AndroidiOSWebLinux7.2From €3,588 a year - 5
BleachPDF
Free planOpen sourceLinuxmacOSSelf-hosted7.0Free plan - 6
Excise
Free planAPILinuxmacOSWindows6.8Free plan
