Diligence-report redaction is the removal of personal data from an adviser's findings. Two rules drive it. GDPR Art. 5(1)(c) says share only the data the reader actually needs. And a report written for counsel can carry work-product protection, which wide circulation may waive. anonym.plus keeps the work on your device.
When this applies
The write-up names staff, claimants, and counterparties across the target. Before it leaves the counsel-led circle, cut those identities. The buyer needs the risk finding, not the person behind it.
How anonym.plus handles it
- Load one report or a whole folder into anonym.plus on your device.
- The tool scans names, emails, IDs, and dates in the prose.
- Risk findings and deal context stay; only PII gets flagged.
- Confirm each flag, then redact or swap it.
- Save the clean file with no network call.
What you need to provide
- The report as DOCX, PDF, or pasted text.
- An operator: Redact for slim copies, Replace for readable ones.
- Optional allow-list to keep your own deal terms.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | Lena Voss → [PERSON] |
| Contact | EMAIL_ADDRESS | l.voss@target.com → [EMAIL] |
| Dates | DATE_TIME | signed 14 Mar → [DATE] |
| Finance | IBAN_CODE | account no. → [ACCOUNT] |
| Identifiers | NATIONAL_ID | tax ref → [ID] |
| Location | LOCATION | registered office → [ADDRESS] |
Compliance achieved
- Applies GDPR Art. 5(1)(c) minimisation to what leaves the deal team.
- Local work helps keep legal privilege and work-product protection intact.
- No cloud step, so no outside party ever holds the findings.
- On-device AES-256-GCM guards the working files.
Anonymize due diligence reports offline — see plans & start free →
Limitations & cautions
Free prose varies a lot. Short forms and odd spellings can slip past once in a while. Always check the flags before you export, above all on scanned pages that OCR turned into text.
Frequently asked questions
Can sharing the report waive privilege?
It can. Work-product protection weakens once a document goes to outside parties. Keeping the work local, and cutting the names, limits what a wider circle receives.
What does data minimisation ask for here?
Art. 5(1)(c) says use only what the purpose needs. A buyer needs the finding, not the employee named in it. Redaction is how you show that limit was applied.
Can I run a whole folder of reports at once?
Yes. Point anonym.plus at a folder and it works through each one on your device.