What metadata hides in a typical document?
More than you'd think. An average Word file or PDF carries several layers of hidden information, and each can expose sensitive details to anyone who receives the file.
- Document properties — author name, organization, titles and keywords entered once and forgotten.
- Tracked changes — unaccepted revisions: everything deleted, reworded or "made to disappear" is still there, along with who changed it and when.
- Comments — the editors' internal debate: "the client will never agree to this", "check with legal".
- Versions and recoverable content — some formats keep prior versions or remnants of deleted content.
- Paths and systems — file paths, server and folder names ("C:\Users\jmiller\Clients\Lawsuit_v_X").
- Embedded objects — an Excel table embedded in a deck may contain the full spreadsheet, not just the visible cells.
Why is metadata dangerous in sensitive documents specifically?
Because it exposes exactly what the editing was meant to hide. A negotiation draft gives away your walk-away points in the comments; an opinion reveals its discarded wording in tracked changes; and an "anonymous" file names its writer in the author field.
It is also the twin of the failed-redaction problem: even when the visible text was properly removed, the metadata keeps telling the story. For lawyers and other professionals bound by privilege, leaked comments and revisions are a confidentiality breach in every sense.
What happens to metadata when you upload a document to an AI tool?
When you upload a whole file to an AI tool, the tool receives the file — all its layers included. Even if the task is just "summarize this document", what you handed over includes the comments, the revisions and the properties. That is why real anonymization must include metadata cleaning, not just replacing names in the visible text.
How do you clean metadata before sharing?
- Accept or reject all changes — open tracked changes are living history; finalize them before export.
- Delete all comments — including those marked "resolved".
- Clean document properties — with the editor's built-in inspector (e.g., Inspect Document in Word) or a dedicated tool.
- Export a fresh file — a clean export (e.g., to a new PDF) severs most historical layers; make sure the settings don't copy properties over.
- Verify the result — open the final file and inspect its properties as if you were the recipient.