Internal investigation report redaction is the removal of personal data so the file is anonymous under GDPR Recital 26. anonym.plus does this on your own device. The findings stay readable, but the file no longer names the people involved.
When this applies
You must share the file with the board, outside counsel, or a regulator. Each reader needs the data stripped of names, emails, and IDs first.
How anonym.plus handles it
- Open the file (PDF, DOCX, or scan) in anonym.plus on your device.
- Local OCR reads scanned exhibits, so it catches printed text too.
- The tool flags names, emails, phone numbers, and account IDs.
- Check each flag and fix any term caught by mistake.
- Swap each ID for a steady label, or black it out.
- Save the clean copy. The original never leaves your machine.
What you need to provide
- The file (PDF, DOCX, TXT, or image scan).
- An operator: Replace (swap), Redact (remove), or Mask (partial).
- Optional: a name map if you need to re-link later.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | Maria Schneider → [EMPLOYEE_1] |
| Contact | EMAIL_ADDRESS | m.schneider@corp.com → [EMAIL] |
| Dates | DATE_TIME | interviewed 03/11/2026 → [DATE] |
| Contact | PHONE_NUMBER | +49 681 555 0147 → [PHONE] |
| Identifiers | US_SSN / NATIONAL_ID | 078-05-1120 → [ID] |
| Financial | IBAN_CODE | DE89 3704 0044 → [ACCOUNT] |
Compliance achieved
- True anonymity puts the file outside scope by GDPR Recital 26.
- Runs offline, so privileged work-product never reaches a third party.
- Working files are kept safe with AES-256-GCM.
- Handles GDPR Art. 9 sensitive data for EU subjects too.
Anonymize investigation reports offline — see plans & start free →
Limitations & cautions
Direct IDs go, but a unique role plus a date can still hint at one person. Review free-text quotes by hand. The tool catches named items, yet it cannot judge when an indirect clue re-identifies someone.
Frequently asked questions
Does redaction protect attorney work-product?
The work stays on your own device with no cloud step. No outside party touches the file, so privilege and work-product protection are not waived by an upload.
When is the file truly anonymous under GDPR?
When no one can reasonably re-identify it. That means no kept re-link key and low risk from the rest of the text. Only then does Recital 26 take it out of scope.
Will the findings still read well after the swap?
Yes. The Replace operator puts a steady label in place of each name, so the text still flows and no longer points to a real person.