Tokenization mapping redaction is the removal of the real card number from a token map under PCI-DSS v4.0 Req. 3.5. That requirement guards the keys and data that protect a stored number. anonym.plus marks each true value on your device, so the alias stays while the digits go.
When this applies
A vault export pairs each alias with the real number it stands for. You strip those values under Requirement 3.5 before the map is shared.
How anonym.plus handles it
- Open the mapping file in anonym.plus on your device.
- The tool flags the sensitive number field.
- It keeps the alias field untouched.
- Confirm no real number remains in any row.
- Apply Redact or Mask to those values.
- Save the clean map locally.
What you need to provide
- The token map (CSV, JSON, or TXT).
- An operator (Redact removes the real value).
- Optional allow-list for the alias field.
PII & financial identifiers detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Account | CREDIT_CARD | tok_a1b2 → 4111... → [CARD] |
| Account | CREDIT_CARD | pan column → [REMOVED] |
| Names | PERSON | holder name → [HOLDER] |
| Bank | IBAN_CODE | linked IBAN → [IBAN] |
| Identifiers | US_SSN | linked SSN → [SSN] |
| Dates | DATE_TIME | vault date → [DATE] |
Compliance achieved
- Guards the token map per PCI-DSS v4.0 Req. 3.5.
- Keeps the alias field so the map still joins downstream.
- Offline work keeps the real numbers off any server.
Anonymize tokenization maps offline — see plans & start free →
Limitations & cautions
An alias by itself is safe only while the vault that reverses it stays protected. The tool removes the sensitive field; it does not secure your vault keys, which you must manage separately.
Frequently asked questions
Does the tool keep the alias field?
Yes. Allow-list it so the alias stays while the sensitive values are removed.
Can it black out the whole number field at once?
Yes. Apply Redact to it, then confirm no real value remains in any row.
Is the map uploaded?
No. The app runs locally, so the real numbers stay on your device.