Gateway export de-identification is the removal of personal account data from a payment export under PCI DSS v4.0. The standard limits how stored account numbers persist. anonym.plus marks each value on your device, so the dataset stays analysable while customer data is shielded in line with UK GDPR.
When this applies
A gateway file drops thousands of rows with account, email, and amount columns. You strip those identifiers under the standard before any analytics load.
How anonym.plus handles it
- Open the file in anonym.plus on your device.
- The tool maps columns of account, email, and name data.
- It flags each sensitive cell across the rows.
- Keep numeric amount and currency columns for analysis.
- Apply Replace with a steady label per column.
- Save the de-identified copy locally.
What you need to provide
- The export (CSV, JSON, or TXT).
- An operator (Replace keeps columns analysable).
- Optional name map for a reversible join later.
PII & financial identifiers detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Account | CREDIT_CARD | pan column → [CARD] |
| Contact | EMAIL_ADDRESS | email column → [EMAIL] |
| Names | PERSON | name column → [BUYER] |
| Bank | IBAN_CODE | iban column → [IBAN] |
| Location | LOCATION | billing town → [TOWN] |
| Amount | MONEY | amount column → kept |
Compliance achieved
- Limits stored account data per PCI DSS v4.0.
- Keeps numeric columns intact for downstream analytics.
- Offline handling keeps the dataset off any server, as the ICO expects.
Anonymise gateway exports offline — see plans & start free →
Limitations & cautions
A reversible name map can re-link rows if it is kept, so turn it off for true anonymity. A rare amount or timestamp combination can still single out a customer; consider that before release.
Frequently asked questions
Can I keep the amount and currency columns?
Yes. Numeric columns stay so analysis still works. Only the account, name, and contact cells are de-identified.
Is the result reversible?
Only if you keep the name map. Turn it off when you need true anonymity with no path back to a customer.
Does the export get uploaded?
No. The app is fully offline, so the dataset never leaves your machine.