How to Anonymize Documents Before Sharing with ChatGPT or Claude

Published March 17, 2026 · 6 min read · Text guide · File guide

Every time you upload a contract, medical record, HR file, or business report to ChatGPT or Claude, you are transferring personal data to a US-based cloud service. Under GDPR, this may constitute an unlawful data transfer. The fix is simple: anonymize the document first, locally, before any AI ever sees it.

Why Uploading PII to AI Tools is a GDPR Risk

ChatGPT (OpenAI), Claude (Anthropic), and Gemini (Google) are US-based cloud services. When you upload a document containing personal data — names, email addresses, medical records, contracts with client information — you are:

• Transferring personal data to a third country (USA) without GDPR-compliant safeguards in most cases
• Acting as a data controller who bears full responsibility for that transfer under GDPR Art. 44–49
• Potentially contributing to AI training — some services use uploaded content to improve models, depending on privacy settings
• Violating professional secrecy obligations — lawyers, doctors, HR professionals, and accountants face additional duties beyond GDPR

The solution is not to stop using AI tools — it is to strip all personal data before the AI ever sees the document. Anonymized content is not personal data under GDPR Recital 26, so it can be freely shared with cloud services.

What Personal Data to Remove

Before sending a document to an AI assistant, remove all of the following:

anonym.plus detects all of these and 340+ more entity types automatically. You review the results before any data is modified.

Replace vs Encrypt: Which Mode to Use

anonym.plus offers two anonymization approaches for AI workflows:

Replace (one-way anonymization)

Each PII entity is replaced with a generic label: [PERSON_1], [EMAIL_1], [IBAN_1]. The AI sees a clean document with placeholders. The original values are permanently removed from the output file — this produces true anonymization under GDPR Recital 26.

Best for: Legal research, compliance drafting, summarization, translation, content review — any task where the AI does not need to know actual personal values.

Encrypt (reversible pseudonymization)

Each PII entity is replaced with a unique AES-256-GCM ciphertext token. The document looks anonymized to the AI but can be fully restored later using your stored encryption key. This enables the encrypt-share-edit-decrypt workflow: you send the encrypted document to an AI or colleague, receive their edited version back, then deanonymize in one click.

Best for: Contract review, document editing, medical coding, any task where the AI's output must reference the original personal values.

Step-by-Step Workflow

1. Open anonym.plus and go to the Files tab (for documents) or Text tab (for pasted text).
2. Drop your file — PDF, DOCX, XLSX, TXT, CSV, or image. All processing is local; nothing is uploaded.
3. Select a detection preset — use the GDPR Compliance preset (confidence 0.90) or configure entity types manually.
4. Choose Replace or Encrypt depending on whether you need the AI's response to reference specific values.
5. Review detected entities — correct false positives and confirm all PII is flagged.
6. Click Anonymize and export the clean output file.
7. Upload the anonymized file to the AI — Claude, ChatGPT, Gemini, Copilot, or any other tool.
8. (If Encrypt) Deanonymize the AI response — paste the AI's response into anonym.plus Deanonymize tab. The app auto-matches encrypted tokens and restores original values.

The Legal Basis: Why Anonymized Data is Safe to Share

GDPR Recital 26 states: "The principles of data protection should therefore not apply to anonymous information, namely information which does not relate to an identified or identifiable natural person."

Properly anonymized documents — where re-identification is effectively impossible — fall entirely outside GDPR's scope. You can share them with any service in any country without data transfer restrictions, without consent, and without a Data Processing Agreement.

For Replace-mode outputs, anonym.plus produces true anonymization. For Encrypt-mode outputs, the output is pseudonymized (GDPR still applies, but the AI service receives pseudonymized rather than clearly personal data). Always use Replace for external AI services where you do not need the values restored.