Form I-9 Redaction with anonym.plus

Strip identity data from a completed I-9 before it leaves your HR team.

Form I-9 redaction is the removal of identity data from an employment eligibility verification under IRCA, 8 U.S.C. §1324a. The law obliges an employer to confirm work status. anonym.plus marks names, ID numbers, and dates on your own device, so the file stays usable while the data goes.

When this applies

An I-9 lists a worker's name, birth date, and document numbers in one place. You must shield those before a copy reaches an auditor or a shared drive.

How anonym.plus handles it

  1. Open the completed I-9 in anonym.plus on your workstation.
  2. Local OCR reads any scanned page attached to it.
  3. The tool flags names, ID numbers, and birth dates.
  4. Confirm each flag and clear any field caught by mistake.
  5. Replace each item with a label, or black it out.
  6. Save the clean copy. The original never leaves your machine.

What you need to provide

PII entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONMaria Delgado → [WORKER]
IdentifiersUS_SSN078-05-1120 → [SSN]
DatesDATE_TIMEDOB 04/12/1990 → [DOB]
IdentifiersUS_PASSPORTpassport no. → [PASSPORT]
IdentifiersUS_DRIVER_LICENSElicense no. → [LICENSE]
LocationLOCATIONhome address → [ADDRESS]

Compliance achieved

Anonymize employment eligibility forms offline — see plans & start free →

Limitations & cautions

The retention and inspection rules under IRCA still apply to the original. The tool flags named items, but it cannot decide what an audit may require. Keep the source copy per your retention policy.

Frequently asked questions

Can I redact a stored I-9 before an inspection?

You can redact a shared copy, yet IRCA may require the original on inspection. Keep the source and share only the cleaned version where allowed.

Does this keep worker data private?

Yes. The app runs on your own device with no cloud step. Nothing is uploaded, so the data never leaves your machine.

Will the page still read correctly after the swap?

Yes. The Replace operator drops a steady label in place of each item, so the layout still makes sense and no longer names a real person.