30 Days Gen AI Risk Trial -Start Now
Skip to main content
Control evaluation · Practical playbook

Verify DOCX redaction without losing document structure

A redacted Word file must remove the information your policy protects while retaining the structure needed for the approved task. Check its content and behavior as a document, not only a screenshot of the first page.

For Security evaluators and document owners

Synthetic example

A synthetic supplier agreement remains reviewable

A procurement team wants AI help summarizing obligations in a fictional agreement. Names must be removed while clause numbering and commercial terms required for the task remain intelligible.

What you are working with

  • A synthetic agreement with numbered headings, tables, repeated fictional entities, headers and footers.
  • Clearly marked test comments and tracked changes containing separate fixtures whose handling must be checked.
  • An expected-content checklist identifying protected entities, permitted terms and document features that must remain usable.

A safer approach

  • Agree which document components the evaluated product supports before claiming those components are sanitized.
  • Keep the original fixture and output in a controlled test folder with distinct names and versions.
  • Review both rendered pages and editable document content; use fictional values throughout the experiment.

Expected outcome: The sanitized output meets the agreed content checklist and opens as a usable document, or the evaluator records a precise component-level limitation.

Put it into practice

Work through the procedure

  1. Define a document-level expectation

    Ask the document owner which clauses, tables and relationships are necessary for a useful summary. Identify protected text separately. Put repeated entities in more than one location so inconsistent replacement is visible, but do not expect unsupported fields to be handled automatically.

  2. Produce the scoped output

    Run the synthetic agreement through the agreed upload and redaction workflow. Record the product version, selected policy and provider path in your test worksheet. Preserve the actual resulting file if the workflow exposes it; a popup preview is not equivalent evidence.

  3. Inspect visible and secondary content

    Compare headings, numbering, table cells, headers, footers, comments and tracked revisions against the checklist. Check each component independently. If output inspection is unavailable, ask for an agreed verification method and mark those content claims unresolved rather than assuming removal.

  4. Check editing and task usefulness

    Open the resulting file in the document application your team uses. Check page flow and table readability, then have a reviewer answer the intended summary questions from the sanitized document. Record whether removed details make an important clause ambiguous or misleading.

Evidence before approval

What to check before proceeding

1. Protected content

Ready when
Every in-scope fixture is removed or transformed as agreed, including repeated occurrences.
If the check fails
Stop approval of that component and identify a supported preparation or remediation step.

2. Document structure

Ready when
Headings, tables and clause references remain readable and usable for the review task.
If the check fails
Document the affected feature and assess whether a simpler source document is acceptable.

3. Task accuracy

Ready when
A reviewer can answer the approved questions without guessing relationships lost during redaction.
If the check fails
Revise the minimization plan or choose a task that needs less sensitive context.

Common mistakes to avoid

  • Checking only body paragraphs while leaving comments, tracked deletions or headers outside the evidence review.
  • Calling a file layout-preserving because it opens, even though broken numbering or merged table content changes meaning.
Workforce AI Security

Evaluate this workflow with Aona

Where Aona can help

Ask Aona to evaluate a synthetic DOCX with your actual layout requirements and identify which document components the current workflow handles.

What to confirm

DOCX support does not establish coverage of every embedded object, revision history or metadata field; confirm each requirement with engineering.

Evaluating a control for your organization?

Bring your target AI tool, device and acceptance criteria. Review the supported control path, the evidence you need and any limitations before deciding on a pilot.

FAQ

Questions about this workflow

No. It shows visible layout at one moment. The editable output and relevant secondary content need inspection before concluding the required information was removed.
Technical evaluation

Evaluating a control for your organization?

Bring your target AI tool, device and acceptance criteria. Review the supported control path, the evidence you need and any limitations before deciding on a pilot.

Verify DOCX Redaction and Layout | Aona AI