Abstract: Embodiments of the invention relate to systems and methods for redacting sensitive data entries. A command to a document is received, where the document comprises data entries, wherein each data entry comprises text-based content. One or more sensitive data entries in the document are identified. A link between each identified sensitive data entry and a descriptor label is defined, and the link and the descriptor label are stored in a repository. A redacted document is generated by, for each identified sensitive data entry, replacing the text-based content with the associated descriptor label.