Salary sacrifice record redaction is the removal of personal data from the files for a salary sacrifice arrangement, such as pension, cycle to work, or childcare. The records are processed under UK GDPR and the DPA 2018. anonym.plus marks each identifier on your device, so the file stays usable while private detail drops out.
When this applies
Such a file lists the participant, an NI number, and the monthly deductions. You trim those identifiers before it goes to a reward reviewer.
How anonym.plus handles it
- Open the file in anonym.plus on your device.
- Local OCR reads scanned agreement pages.
- The tool flags participant names, NI numbers, and amounts.
- Keep the deduction totals a reviewer needs.
- Swap or black out the confirmed items.
- Save the clean copy locally.
What you need to provide
- The sacrifice file (PDF, scan, or CSV).
- An operator (Mask suits the NI number).
- Optional batch for a year of records.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | participant K. Ramsay → [PARTICIPANT] |
| NI number | UK_NINO | QQ 50 98 82 C → [NINO] |
| Scheme | MEDICAL_CONDITION | health-related item → [ITEM] |
| Financial | MONEY | deducted £310 → [AMOUNT] |
| Account | UK_BANK_NUMBER | acct 60-110423 → [ACCOUNT] |
| Dates | DATE_TIME | tax year 2025/26 → [DATE] |
Compliance achieved
- Limits exposure of participant data under UK GDPR & DPA 2018.
- Keeps deduction totals a reviewer must verify.
- Offline work keeps the file and its agreements off any server.
Anonymise salary sacrifice records offline — see plans & start free →
Limitations & cautions
A sacrificed item can hint at a health need even after the name goes. The tool flags named items; it cannot judge every indirect clue. Review item notes before sharing the file.
Frequently asked questions
What is a salary sacrifice record?
It logs an arrangement where pay is exchanged for a benefit, such as pension or cycle to work. Redacting identifiers from records shared internally protects the participant.
Can it read scanned agreements?
Yes. Local OCR reads each agreement image, then flags the amount and any item note for review.
Is the file uploaded?
No. The app runs locally, so the deduction data stays on your device.