Recruitment vendor data redaction is the removal of personal information from a file bound for a processor. GDPR Art. 28 governs the controller-processor relationship and its scope. anonym.plus marks identifiers on your device, so a vendor receives only the minimum the role requires.
When this applies
An agency brief or shortlist often carries more personal detail than a vendor needs. You trim the extra identifiers before the handoff under Art. 28.
How anonym.plus handles it
- Open the file in anonym.plus on your device.
- Local OCR reads a scanned shortlist page.
- The tool flags names, contacts, and IDs.
- Confirm each flag and keep role-relevant fields.
- Swap or black out the confirmed identifiers.
- Save the minimized file locally.
What you need to provide
- The vendor-bound file (PDF, DOCX, CSV).
- An operator (Replace keeps the brief readable).
- Optional batch for a full shortlist.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | shortlisted Bauer → [CANDIDATE] |
| Contact | EMAIL_ADDRESS | bauer@example.com → [EMAIL] |
| Contact | PHONE_NUMBER | (720) 555 3310 → [PHONE] |
| Identifiers | NATIONAL_ID | national ID → [NATIONAL_ID] |
| Location | LOCATION | home city → [LOCATION] |
| Organization | ORGANIZATION | current firm → [EMPLOYER] |
Compliance achieved
- Supports minimization for a processor under GDPR Art. 28.
- Shares only the fields the role and contract require.
- Offline work keeps candidate detail off any server.
Anonymize recruitment vendor files offline — see plans & start free →
Limitations & cautions
Art. 28 requires a written processor contract and safeguards this tool does not provide. It minimizes fields only. Keep a compliant processing agreement in place with the vendor.
Frequently asked questions
What does Art. 28 require of a processor?
GDPR Art. 28 requires a written contract and safeguards. anonym.plus supports the minimization part by trimming fields before sharing.
Can I keep role-relevant fields?
Yes. Allow-list the fields the vendor needs. Only extra identifiers are removed.
Is the file uploaded?
No. The app runs locally, so candidate detail stays with you until you send it.