Third-Party Production Redaction with anonym.plus

Clear PII from subpoenaed records to protect non-parties under FRCP 45.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Third-party production redaction is the removal of personal data from records a non-party produces under an FRCP 45 subpoena. Rule 45(d)(1) puts a duty on the issuing party to avoid undue burden. anonym.plus does the pass on-site, so nothing travels to be cleaned.

When this applies

A subpoena to a bank, employer, or clinic returns files about people who never joined the case. Rule 45(d)(3)(A)(iii) lets the court quash a command that requires disclosing protected matter. Clearing the data first is the cheaper route.

How anonym.plus handles it

  1. Load the subpoenaed files into anonym.plus on your device.
  2. Local OCR reads scanned statements and forms.
  3. The tool flags names, accounts, and IDs across the set.
  4. Confirm the flags for everyone named in the files.
  5. Redact or mask each confirmed value.
  6. Save the clean output on your device.

What you need to provide

PII entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONnon-party name → [NAME]
AccountUS_BANK_NUMBERaccount no. → [ACCOUNT]
IdentifiersUS_SSNSSN → [SSN]
ContactPHONE_NUMBERphone → [PHONE]
LocationLOCATIONaddress → [ADDRESS]
DatesDATE_TIMEDOB → [DOB]

Compliance achieved

Anonymize third-party productions offline — see plans & start free →

Limitations & cautions

Subpoenaed files can name many uninvolved people. Bank and employer paperwork packs PII into fixed layouts, so confirm every column is mapped. OCR on scanned statements needs a check, since a missed account number exposes an outsider.

Frequently asked questions

Does a non-party have to serve a privilege log?

Yes. Rule 45(e)(2)(A) puts the same describe-without-revealing duty on a subpoena recipient that Rule 26(b)(5)(A) puts on a litigant. That log then needs its own pass.

How long does a recipient have to object?

Rule 45(d)(2)(B) sets the earlier of 14 days after service or the compliance date. A local batch run fits that window without shipping files to a vendor first.

Can it read scanned bank statements?

Yes. Local OCR reads scans, so account numbers in image files are caught.