Is it safe to strip PII from a tax return PDF with Python and send the scrubbed data to Claude via API to analyze or create a checklist, and can this be done for every tax return once the AI confirms sensitive data isn't retained?

One member described a workflow built with a colleague: using Python to import a tax return PDF, redact PII (replacing it with bracketed placeholders), and then send the scrubbed return to Claude via an API key for analysis, such as building a checklist. When asked whether the data was being retained or going anywhere, Claude reportedly responded that it was not. The member asked whether this effectively 'cracked the code' to safely process every tax return this way.