Invoice Redaction with anonym.plus

Clear personal data from a billing document so it falls outside UK GDPR.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Invoice redaction is the removal of personal data from a billing record, so it meets the anonymity test in UK GDPR Recital 26. A VAT invoice is not anonymous by nature. Regulation 14 of the VAT Regulations 1995 requires it to carry the customer's name and address, along with the supplier's name, address, and VAT registration number. anonym.plus marks each identifier on your device, so the line items stay while the named buyer goes.

When this applies

A bill names the customer, their email, and a card or bank line. VATA 1994 Sch. 11 para. 6 requires the record itself to be preserved for the period the Commissioners set, which cannot exceed six years. You clear the identifiers from the copy that joins a shared sample set.

How anonym.plus handles it

  1. Open the bill in anonym.plus on your device.
  2. Built-in OCR reads a scanned or PDF copy.
  3. The app marks the buyer name, email, and card line.
  4. Keep the SKU, quantity, and price columns.
  5. Turn the alias map OFF for true anonymity.
  6. Save the clean record locally.

What you need to provide

PII & financial identifiers detected

Categoryanonym.plus entity typeExample
NamesPERSONbuyer Anna Reid → [CUSTOMER]
ContactEMAIL_ADDRESSanna@example.co.uk → [EMAIL]
FinancialCREDIT_CARD4111 11.. → ****1111
LocationLOCATIONship-to address → [ADDRESS]
MoneyMONEYtotal £640 → [AMOUNT]
ContactPHONE_NUMBER+44 113 555 9920 → [PHONE]

Compliance achieved

Anonymise invoices offline — see plans & start free →

Limitations & cautions

True anonymity under Recital 26 means no realistic re-identification. A rare item plus a date can still single out a buyer. Regulation 14 also puts an identifying number and the supplier's VAT registration on the face of the invoice. Keep the alias map off and review unusual lines.

Frequently asked questions

When is a bill truly anonymous under Recital 26?

When no one could realistically re-identify the buyer — the ICO calls this the motivated-intruder test. Turn the alias map off so the swap leaves no reversible link to a person, because DPA 2018 s.171 makes re-identification an offence.

Which invoice fields name a person?

Regulation 14 of the VAT Regulations 1995 requires the name and address of the customer, and the supplier's name, address, and VAT registration number. For a sole trader, several of those point straight at one individual.

Can I keep the prices and SKUs?

Yes. Allow-list the line columns. Only the buyer's identifiers are removed, so the sample stays useful for analysis and nothing leaves your device.