Skip to content
BastionSec
Contact us
Data Protection · Metadata scrubbing

Strip hidden metadata from documents before they leave the company.

Photos, PDFs and Office files carry information you don't see: who wrote them, the revisions, the GPS location. We clean it automatically before external sharing. A subscription service, simple and tracked.

  • Removal of EXIF, Office author/revisions and GPS coordinates.
  • Batch processing: many files at once, not one by one.
  • Audit log of what was cleaned and when.

Who metadata scrubbing is for

Quick self-qualification: do you recognise yourself in one of these?

Anyone sharing many documents

You send PDFs, proposals and contracts to clients and suppliers and don't want them carrying authors, comments or revisions.

Firms and agencies

You deliver work to clients and want it clean: no internal names, no traces of who worked on it.

Anyone publishing photos and media

You upload images to your site or socials and don't want to expose GPS location or device model.

What metadata is and why to clean it

Every file carries data you don't see when you open it: a photo records the camera model, date and often GPS coordinates; an Office document keeps the author, reviewers, comments and sometimes deleted text; a PDF tracks the software and the author.

This metadata can reveal more than you'd want: people's names, internal structure, physical locations, edit history. Scrubbing removes it before the file leaves the company, leaving the useful content intact.

Which metadata we remove

EXIF in images

Device model and settings, date/time, and especially the GPS coordinates hidden in photos.

Office author and revisions

Author and last editor, comments, tracked changes, hidden text and document properties in Word, Excel and PowerPoint.

PDF properties

Author, creation software, title and XMP metadata that stay in the file even after export.

What this service does NOT do: it is NOT GDPR anonymisation (it does not anonymise personal data in the text or images) and it is NOT forensic sanitisation (it does not guarantee irrecoverable deletion at the disk level). It removes file metadata before sharing: nothing more, nothing less.

How it works

A simple flow, designed to fit into everyday work.

  1. 1

    You upload files

    Single or in batch, from the formats you use every day.

  2. 2

    Metadata analysis

    The tool detects the metadata present in each file.

  3. 3

    Cleaning

    It removes the selected metadata, leaving the content intact.

  4. 4

    Download & audit log

    You download the cleaned files; a record of what was done remains.

Features

  • Batch processing of multiple files in a single operation.
  • Support for images (EXIF), Office documents and PDFs.
  • Audit log: a record of what was cleaned and when, useful as internal evidence.
  • Designed for recurring use before external sharing, not a one-off.

Model and pricing

It's a subscription (SaaS): from ~€100/month. No surprise quotes for standard use.

For high volumes or dedicated integrations (for example automatic cleaning wired into your flows) we define an extension together. See the pricing page.

Frequently asked

Does metadata scrubbing anonymise data for GDPR purposes?

No. It removes the file's technical metadata (author, revisions, GPS, EXIF), but it does not anonymise the personal data in the content, for example a name written in the text or a face in a photo. GDPR anonymisation is a different thing.

Is it forensic disk sanitisation?

No. It does not irrecoverably erase data at the storage-medium level. It acts on the metadata inside files before they're shared, not on the secure wiping of a disk.

Which formats do you support?

Images with EXIF metadata, Office documents (Word, Excel, PowerPoint) and PDFs. For unusual formats we check feasibility together.

Does the document content stay intact?

Yes. We only remove metadata: text, visible images and layout stay exactly as you see them when opening the file.

Can I clean many files at once?

Yes, batch processing is built for this: you upload multiple files and download them cleaned, without doing it one by one.

Is there a record of what was cleaned?

Yes. There's an audit log that records the operations: useful as internal evidence, including on a compliance path.

Go deeper

Data Protection

The full hub: access management, DLP, encryption, classification and data governance. Scrubbing is part of it.

See the hub

GDPR

What GDPR really asks about personal data protection. To understand the difference from scrubbing.

Read the guide

Managed Workspace & Identity

Governance of Google Workspace/M365 and access management: where documents are born and shared.

Learn more

Stop leaking metadata without noticing.

Tell us your need: we look at your sharing flows and tell you whether scrubbing is actually for you.