Evaluation redaction is the removal of all 18 HIPAA Safe Harbor IDs (45 CFR §164.514(b)) from a psychiatrist's write-up. anonym.plus does it on your machine. The clinical reasoning stays, but the patient is no longer named.
When this applies
You need to send an eval for a second opinion or for a teaching file. Names, dates, and contact lines must come out before it goes anywhere.
How anonym.plus handles it
- Open the document in anonym.plus on your own device.
- Local OCR lifts text from any scanned page.
- It marks names, dates, addresses, and ID numbers.
- Check each flag and keep the diagnostic wording intact.
- Swap each value for a steady label, or hide it.
- Store the cleaned copy. The source stays on your machine.
What you need to provide
- The eval file (PDF, DOCX, TXT, or scan).
- An operator: Replace, Redact, or Mask.
- Optional: a name map for later re-linking.
PHI entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Patient name | PERSON | Helen Park → [PATIENT_1] |
| Birth date | DATE_TIME | DOB 09/14/1988 → [DATE] |
| Record ID | MEDICAL_RECORD_NUMBER | MRN 71902 → [MRN] |
| Address | LOCATION | 44 Birch Lane → [ADDRESS] |
| Phone | PHONE_NUMBER | (617) 555 0190 → [PHONE] |
| National ID | US_SSN / NATIONAL_ID | 521-04-9930 → [ID] |
Compliance achieved
- Removes all 18 ID classes for HIPAA Safe Harbor (45 CFR §164.514(b)).
- On-device only, so no BAA is required.
- Drafts are kept safe with AES-256-GCM.
- Handles GDPR Art. 9 health data for EU patients too.
Anonymize psychiatric evaluations offline — see plans & start free →
Limitations & cautions
Safe Harbor also asks that no leftover detail could re-identify the person. The tool clears the 18 ID types. A rare diagnosis plus a small town can still hint at identity, so review free text and weigh Expert Determination.
Frequently asked questions
What are the 18 Safe Harbor identifiers?
Names, small geographic units, all personal dates, phone and fax, email, SSN, MRN, account and plan numbers, license, vehicle and device IDs, URLs, IPs, biometrics, full-face photos, and any other unique code.
Will the diagnosis still read clearly?
Yes. Replace puts a fixed label where each ID was. The clinical narrative still flows and no longer points to a real patient.
Is anything sent to a server?
No. Every step happens on your own computer. The file is never uploaded.