Payslip Redaction with anonym.plus

Strip identifiers from an itemised pay statement before you share or store it.

Payslip redaction is the removal of personal identifiers from the itemised pay statement an employer must give under the Employment Rights Act 1996 s.8, with PAYE totals reported to HMRC under the Income Tax (PAYE) Regs 2003 (RTI). anonym.plus marks each name, number, and amount on your own device, so the slip stays readable while the protected data goes.

When this applies

A pay statement shows a worker's name, National Insurance number, and net figure in plain view. You must trim those details before the record reaches a supplier or audit folder.

How anonym.plus handles it

  1. Open the slip in anonym.plus on your workstation.
  2. Local OCR reads a scanned or printed copy.
  3. The tool flags the NI number, bank line, and earnings.
  4. Confirm each flag and keep the period dates intact.
  5. Swap or black out the marked items.
  6. Save the clean file locally with no network call.

What you need to provide

PII entity types detected

Categoryanonym.plus entity typeExample
IdentifiersUK_NINOQQ 12 34 56 C → [NINO]
NamesPERSONDaniel Hughes → [STAFF]
FinancialMONEY£2,408.55 → [AMOUNT]
FinancialUK_BANK_NUMBERa/c 12345678 → [ACCOUNT]
DatesDATE_TIMEpay date 12/04 → [DATE]
ContactEMAIL_ADDRESSd.hughes@example.co.uk → [EMAIL]

Compliance achieved

Anonymise payslips offline — see plans & start free →

Limitations & cautions

A slip can still hint at a person through a unique job title or figure. The tool flags named items, not every indirect clue. Review the layout before you share it.

Frequently asked questions

Which rules sit behind a UK payslip?

The Employment Rights Act 1996 s.8 sets the itemised pay statement; the Income Tax (PAYE) Regs 2003 govern the RTI report to HMRC. anonym.plus removes the personal identifiers printed on that record before you share it.

Is the slip ever uploaded?

No. The desktop app runs on your machine with no cloud step. Nothing leaves the device, so the wage data stays private and the ICO's expectations are met.

Will the statement still read correctly after the swap?

Yes. The Replace operator drops a steady label in place of each identifier, so the record still makes sense and names no real person.