Onboarding Checklist Redaction with anonym.plus

Clear identity data from an onboarding checklist before it is shared.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Onboarding checklist redaction is the removal of identifiers from a joiner's task list. The list usually tracks steps that carry their own duties: a 48-hour opt-out under the Working Time Regulations 1998, and pension auto-enrolment under the Pensions Act 2008. anonym.plus marks names, contacts, and ID numbers on your device, so the steps stay auditable while the joiner's data goes.

When this applies

Regulation 4(1) of the 1998 Regulations caps average weekly working time at 48 hours, reg. 5 lets a worker agree in writing to opt out, and reg. 9 makes the employer keep records for two years showing the limit is met. The checklist is where those steps are ticked off, so it travels to managers who need the tick, not the NI number beside it.

How anonym.plus handles it

  1. Open the task list in anonym.plus on your device.
  2. Local OCR reads a scanned, signed sheet.
  3. The tool flags names, contacts, and ID numbers.
  4. Confirm each flag and keep the step labels.
  5. Swap or black out the confirmed items.
  6. Save the clean sheet locally.

What you need to provide

PII entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONjoiner Sara Bell → [JOINER]
ContactEMAIL_ADDRESSs.bell@example.co.uk → [EMAIL]
IdentifiersUK_NINOQQ 20 46 71 C → [NINO]
ContactPHONE_NUMBER+44 117 496 0908 → [PHONE]
LocationLOCATIONhome address → [ADDRESS]
DatesDATE_TIMEstart 04/2026 → [DATE]

Compliance achieved

Anonymise onboarding checklists offline — see plans & start free →

Limitations & cautions

A cleaned checklist is not the record itself. Working-time records under reg. 9 and auto-enrolment evidence must stay complete and attributable in your own system, so redact the copy that circulates, not the source.

Frequently asked questions

Will the step labels survive?

Yes. Allow-list the step and date columns so the opt-out, enrolment, and induction lines stay readable while personal identifiers are removed.

Does this replace my working-time records?

No. Reg. 9 of the Working Time Regulations 1998 asks for records adequate to show the 48-hour limit is met, kept for two years. A redacted checklist is a shareable summary, not that record.

Is the sheet uploaded?

No. The app is fully offline, so joiner data stays on your machine.