Abstract: A data redaction system may include one or more processing devices and one or more memory devices in communication with the one or more processing devices. The one or more memory devices may store computer program instructions executable by the one or more processing devices. Data indicating sensitive information may be received. The sensitive information may be identified using a data recognition model. Access data corresponding to access permission for the sensitive information may be determined. Request data may be received corresponding to a request for the data. It may be determined whether the request data indicates a user that is also indicated by the access data. In response to the access data indicating the user, the data may be output. In response to the access data not indicating the user, the data may be output with the sensitive information redacted.