How to verify the software does not upload your documents

Steps

1. Create an outbound block ruleOpen "Windows Defender Firewall with Advanced Security" → Outbound Rules → New Rule → Program, select PDFTextReplacer.exe, choose "Block the connection", and apply it to all profiles.
2. Run the full workflowOpen a scanned PDF, then find, preview, replace and save. Then process it once with secure redaction. Every feature should work, and read-back verification and residue checks should complete as usual.
3. Watch connections (optional)Remove the block rule, open the "Network" tab in Resource Monitor or start Wireshark, process a file again, and look at the connections made by PDFTextReplacer.exe.
4. Compare with the network behavior pageIn the current version, any connections you see should belong only to a language pack download you clicked, or cloud AI translation that you started.

Create the block rule with a command

In PowerShell run as administrator:

New-NetFirewallRule -DisplayName "Block PDFTextReplacer outbound" -Direction Outbound -Program "C:\Path\To\PDFTextReplacer.exe" -Action Block

Replace the path with the software’s actual location. When you have finished, remove the rule with:

Remove-NetFirewallRule -DisplayName "Block PDFTextReplacer outbound"

Watch with Resource Monitor

1. Press Win+R, type resmon, and switch to the “Network” tab.
2. Under “Network Activity”, tick PDFTextReplacer.exe.
3. Process a file and watch whether any new remote addresses appear.

Watch with Wireshark

For a more complete record, start a Wireshark capture before processing the document, stop it when processing ends, and filter by destination address. DNS queries are recorded as well.

What you should see

There should be no connections while documents are being processed. The current version goes online only when you click to download a language pack (connecting to third-party model hosts) or use cloud AI translation (connecting to the provider you chose). Update checks and error reports are not implemented yet, so there should be no connections at startup. What each type sends is described in Network behavior.

FAQ

Which features are affected when outbound traffic is blocked?

Only language pack downloads and cloud AI translation (local models are not affected). Finding, replacing, redacting, read-back verification and saving are not affected.

Can an organization configure this centrally?

Central policy management is still planned and not available in the current version. For now, you can block the software's outbound connections with a firewall rule and import language packs from file.