Executed-contract redaction is the removal of PII from a signed deal under GDPR Recital 26. The recital asks whether re-identification is reasonably likely. Opinion 05/2014 of the Article 29 Working Party sets three tests: singling out, linkability, and inference. anonym.plus runs each pass on your own device.
When this applies
You must share a signed deal with a lender, auditor, or new partner. Recital 26 is the trigger. Once no person can be singled out, the file sits outside the GDPR, so you clear the IDs first.
How anonym.plus handles it
- Open the file (PDF, DOCX, or scan) in anonym.plus on your device.
- Local OCR reads scanned pages, so signed exhibits work too.
- The tool flags party names, addresses, emails, and bank details.
- Check each flag and keep any defined term you need.
- Swap each ID for a label, or black it out.
- Save the clean copy. Nothing leaves your machine.
What you need to provide
- The file (PDF, DOCX, TXT, or image scan).
- An operator: Replace (swap), Redact (remove), or Mask (partial).
- Optional: a name map if you must re-link parties later.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Parties | PERSON | Maria Schneider → [PARTY_1] |
| Company | ORGANIZATION | Acme GmbH → [COMPANY] |
| Contact | EMAIL_ADDRESS | m.schneider@acme.de → [EMAIL] |
| Banking | IBAN_CODE | DE89 3704 ... → [IBAN] |
| Location | LOCATION | 12 Hauptstrasse → [ADDRESS] |
| Dates | DATE_TIME | signed 03/11/2026 → [DATE] |
Compliance achieved
- Targets the reasonably-likely test in GDPR Recital 26.
- Works against all three Opinion 05/2014 risks: singling out, linkability, inference.
- Local work preserves the deal's confidentiality clause.
- Catches 340+ PII types across 48 languages, with AES-256-GCM at rest.
Anonymize executed contracts offline — see plans & start free →
Limitations & cautions
True anonymity is a high bar. A rare term plus a known sector can still hint at a party. If you keep a reversible map, the output is pseudonymous, not anonymous, and stays in scope. Weigh the residual risk first.
Frequently asked questions
What test does Recital 26 actually set?
It asks what means are reasonably likely to be used to identify someone. Cost, time, and available tech all count. If that risk is remote, the file is treated as anonymous.
What do singling out, linkability, and inference mean?
Singling out picks one person out of a set. Linkability joins two records about them. Inference deduces a trait. Opinion 05/2014 counts all three as re-identification.
Anonymous or pseudonymous — what is the difference?
Pseudonymous output keeps a key that can re-link parties, so it stays personal data. Anonymous output drops that key for good. Only then does Recital 26 take it out of scope.