Card application redaction is the removal of personal data from an applicant form under PCI DSS v4.0. The standard limits how stored account numbers are kept. anonym.plus marks each value on your device, so the record stays on file while the applicant's data is shielded under UK GDPR and the DPA 2018.
When this applies
An application gathers the applicant's name, card, income, and NI number. You trim those identifiers under the standard before it is archived.
How anonym.plus handles it
- Open the application in anonym.plus on your device.
- Local OCR reads a scanned, signed page.
- The tool flags the name, the long number, and ID fields.
- Keep product and plan codes you must retain.
- Swap or black out the confirmed items.
- Save the clean copy locally.
What you need to provide
- The form (PDF, DOCX, or scan).
- An operator (Replace keeps it readable).
- Optional name map across linked applications.
PII & financial identifiers detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | applicant Quinn → [APPLICANT] |
| Account | CREDIT_CARD | existing card → [CARD] |
| Identifiers | UK_NINO | QQ 12 34 56 C → [NINO] |
| Bank | UK_BANK_NUMBER | income a/c → [ACCOUNT] |
| Location | LOCATION | home address → [ADDRESS] |
| Dates | DATE_TIME | DOB 1985 → [DOB] |
Compliance achieved
- Limits stored account data per PCI DSS v4.0.
- Helps meet UK GDPR / DPA 2018 duties when archiving applicant data.
- Offline handling keeps the form off any server.
Anonymise card applications offline — see plans & start free →
Limitations & cautions
A signed page may carry handwriting that OCR reads poorly. Verify flags on scanned pages. The tool removes the named fields, not every indirect detail an applicant wrote.
Frequently asked questions
Which fields get flagged on an application?
Name, account number, National Insurance number, address, and birth date. anonym.plus marks each so you can decide what to keep.
Can a scanned, signed page be processed?
Yes. Local OCR reads the scan, so fields on it are flagged for review.
Is the application uploaded for processing?
No. The app runs locally with no upload, so the applicant data stays on your device.