An invoice processing system generates a data structure, comprising a data field value associated with each of a plurality of identified data fields, from a document image comprising text representing each of such data field values. The secure document data capture system includes a character recognition system receiving the document image and recognizing characters within the text to generate, for each of the identified data fields, a data field value for association therewith. A validation engine identifies a subset of the identified data fields which can be referred to as exception data fields due to failure to comply with a validation rule. An exception handling system provides an exception image to a first client system. The exception image comprising a portion of the document image which includes text of the at least one suspect character within the exception data field with a context portion of the document image redacted. The context portion of the document image is a portion of the document image which comprises text which discloses a meaning of the at least one suspect character or the data field value. The exception handling system receives, from the first client system, user input of a replacement character for at least each suspect character. The secure data capture system then generates the data structure utilizing, for each identified data field, the data field values generated by the character recognition system with substitution of the replacement character from the exception handling system for each suspect character.