Invoice redaction is the removal of personal data from a billing record so it meets the anonymity test in UK GDPR Recital 26. That recital says truly anonymous information falls outside the rules. anonym.plus marks each identifier on your device, so the line items stay while the named buyer goes.
When this applies
A bill names the customer, their email, and a card or bank line. You clear those details before the record joins a shared sample set.
How anonym.plus handles it
- Open the bill in anonym.plus on your device.
- Built-in OCR reads a scanned or PDF copy.
- The app marks the buyer name, email, and card line.
- Keep the SKU, quantity, and price columns.
- Turn the alias map OFF for true anonymity.
- Save the clean record locally.
What you need to provide
- The bill (PDF, XLSX, or scan).
- An operator (Redact for a clean break, no re-link).
- The alias map turned OFF when anonymity must be final.
PII & financial identifiers detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | buyer Anna Reid → [CUSTOMER] |
| Contact | EMAIL_ADDRESS | anna@example.co.uk → [EMAIL] |
| Financial | CREDIT_CARD | 4111 11.. → ****1111 |
| Location | LOCATION | ship-to address → [ADDRESS] |
| Money | MONEY | total £640 → [AMOUNT] |
| Contact | PHONE_NUMBER | +44 113 555 9920 → [PHONE] |
Compliance achieved
- Targets the anonymity test in UK GDPR Recital 26.
- Turn the alias map off so the result cannot be re-linked.
- Offline work keeps the billing data off any server.
Anonymise invoices offline — see plans & start free →
Limitations & cautions
True anonymity under Recital 26 means no realistic re-identification. A rare item plus a date can still single out a buyer. Keep the alias map off and review unusual lines.
Frequently asked questions
When is a bill truly anonymous under Recital 26?
When no one could realistically re-identify the buyer — the ICO calls this the motivated-intruder test. Turn the alias map off so the swap leaves no reversible link to a person.
Can I keep the prices and SKUs?
Yes. Allow-list the line columns. Only the buyer's identifiers are removed, so the sample stays useful for analysis.
Does the record leave my device?
No. The app is fully offline, so the billing data is never uploaded.