Merchant onboarding form redaction is the removal of personal data from a new-merchant application under PCI-DSS v4.0. The standard limits how stored account numbers are kept. anonym.plus marks each value on your device, so the record stays on file while principal data is shielded.
When this applies
An onboarding packet gathers the principal's ID, the settlement bank, and contacts. You strip those identifiers under the standard before it is archived.
How anonym.plus handles it
- Open the onboarding packet in anonym.plus on your device.
- Local OCR reads a scanned, signed application.
- The tool flags the principal ID, bank, and contact fields.
- Keep the merchant ID and MCC code you must retain.
- Swap or black out the confirmed items.
- Save the clean copy locally.
What you need to provide
- The onboarding form (PDF, DOCX, scan).
- An operator (Replace keeps it readable).
- Optional allow-list for merchant and MCC codes.
PII & financial identifiers detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | owner Ortiz → [OWNER] |
| Bank | US_BANK_NUMBER | settlement acct → [ACCOUNT] |
| Identifiers | US_SSN | principal SSN → [SSN] |
| Contact | EMAIL_ADDRESS | principal email → [EMAIL] |
| Location | LOCATION | business address → [ADDRESS] |
| Org | ORGANIZATION | legal entity → [ENTITY] |
Compliance achieved
- Limits stored account data per PCI-DSS v4.0.
- Keeps merchant and MCC codes you must retain.
- Offline work keeps the form off any server.
Anonymize onboarding forms offline — see plans & start free →
Limitations & cautions
A signed application may carry handwriting OCR reads poorly. Verify flags on scanned pages. The tool removes named fields, not every detail a principal wrote in.
Frequently asked questions
Which fields get flagged on a packet?
Principal name, taxpayer ID, settlement account, address, and contacts. anonym.plus marks each so you can decide what to keep.
Can a scanned, signed application be processed?
Yes. Local OCR reads the scan, so fields on a signed page are flagged for review.
Is the packet uploaded?
No. The app is fully offline, so the principal data stays on your device.