Form I-9 redaction is the removal of identity data from an employment eligibility verification under IRCA, 8 U.S.C. §1324a. The law obliges an employer to confirm work status. anonym.plus marks names, ID numbers, and dates on your own device, so the file stays usable while the data goes.
When this applies
An I-9 lists a worker's name, birth date, and document numbers in one place. You must shield those before a copy reaches an auditor or a shared drive.
How anonym.plus handles it
- Open the completed I-9 in anonym.plus on your workstation.
- Local OCR reads any scanned page attached to it.
- The tool flags names, ID numbers, and birth dates.
- Confirm each flag and clear any field caught by mistake.
- Replace each item with a label, or black it out.
- Save the clean copy. The original never leaves your machine.
What you need to provide
- The completed form (PDF, DOCX, or scan).
- An operator: Replace (swap), Redact (black out), or Mask (partial).
- Optional: a name map if you must re-link a worker later.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | Maria Delgado → [WORKER] |
| Identifiers | US_SSN | 078-05-1120 → [SSN] |
| Dates | DATE_TIME | DOB 04/12/1990 → [DOB] |
| Identifiers | US_PASSPORT | passport no. → [PASSPORT] |
| Identifiers | US_DRIVER_LICENSE | license no. → [LICENSE] |
| Location | LOCATION | home address → [ADDRESS] |
Compliance achieved
- Supports an employer's verification duty under IRCA (8 U.S.C. §1324a).
- Runs offline, so worker data stays inside your HR team.
- Working copies are kept safe with AES-256-GCM.
- Covers 340+ PII types, far past the few fields on the form.
Anonymize employment eligibility forms offline — see plans & start free →
Limitations & cautions
The retention and inspection rules under IRCA still apply to the original. The tool flags named items, but it cannot decide what an audit may require. Keep the source copy per your retention policy.
Frequently asked questions
Can I redact a stored I-9 before an inspection?
You can redact a shared copy, yet IRCA may require the original on inspection. Keep the source and share only the cleaned version where allowed.
Does this keep worker data private?
Yes. The app runs on your own device with no cloud step. Nothing is uploaded, so the data never leaves your machine.
Will the page still read correctly after the swap?
Yes. The Replace operator drops a steady label in place of each item, so the layout still makes sense and no longer names a real person.