Whistleblower report redaction is the removal of data that could expose the source. EU Dir. 2019/1937 requires that a reporter's identity stay confidential. anonym.plus strips names and contacts on your device, so no clue leaks during handling.
When this applies
A report reaches your compliance team and must move to investigators. The source's name, email, and writing style can give them away if the file is shared raw.
How anonym.plus handles it
- Open the report in anonym.plus on your device.
- The tool flags the source's name, email, and phone.
- It also flags named colleagues and accused parties.
- Confirm each flag, then redact or swap it.
- Save the protected copy with no network call.
What you need to provide
- The report (PDF, DOCX, TXT, or web-form export).
- An operator: Redact to remove, Replace for a readable copy.
- Optional allow-list to keep generic role terms.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | source Jonas Weber → [REPORTER] |
| Contact | EMAIL_ADDRESS | j.weber@corp.com → [EMAIL] |
| Contact | PHONE_NUMBER | 0170 555 9921 → [PHONE] |
| Names | PERSON | accused manager → [SUBJECT] |
| Location | LOCATION | Site Hamburg → [LOCATION] |
| Identifiers | NATIONAL_ID | staff no. A4471 → [ID] |
Compliance achieved
- Supports identity confidentiality under EU Dir. 2019/1937.
- Local processing keeps the reporter's clues off any cloud.
- On-device AES-256-GCM guards the working files.
- Anonymous output sits outside scope by GDPR Recital 26.
Anonymize whistleblower reports offline — see plans & start free →
Limitations & cautions
Names and contacts go, but writing style and rare facts can still point to a source. Review the narrative for tell-tale detail. The tool removes direct IDs; a human must judge indirect identity clues.
Frequently asked questions
How does offline work protect a whistleblower?
The report stays on your own device. Nothing is uploaded, so the person's name and contacts never travel through a cloud service that could leak or be subpoenaed.
Does the Directive require this redaction?
EU Dir. 2019/1937 requires that a reporter's identity stay confidential. Stripping direct IDs before the file is shared internally supports that duty.
Can I keep the substance of the disclosure?
Yes. The allegations and evidence stay. Only data that points to the source or named parties is removed or swapped.