Performance Record Batch De-Identification with anonym.plus

Clean a whole folder of HR records in one local run with steady codes.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Performance record batch de-identification is the removal of identifiers from a whole folder in one run. An archive is where storage limitation under UK GDPR Article 5(1)(e) quietly fails, and accountability under Article 5(2) means you must be able to show what you did to it. anonym.plus processes up to 20 files at a time on your device, with a shared map so one person maps to one code everywhere.

When this applies

A yearly archive holds many files naming the same staff, kept long after the tribunal windows closed. One-by-one work risks drift, so a batch run applies the Recital 26 bar evenly.

How anonym.plus handles it

  1. Point anonym.plus at the archive folder on your machine.
  2. It scans each file for names and contacts.
  3. Built-in OCR reads any scanned pages in the set.
  4. A shared map keeps repeat staff steady across files.
  5. Review the summary and fix low-confidence markings.
  6. Save the cleaned set locally.

What you need to provide

PII entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONname across files → STAFF_1
ContactEMAIL_ADDRESSemails → [EMAIL]
ContactPHONE_NUMBER+44 numbers → [PHONE]
OrgORGANIZATIONteams → [UNIT]
DatesDATE_TIMEreview dates → [DATE]
DemographicNRPgroups → [GROUP]

Compliance achieved

Anonymise performance record sets offline — see plans & start free →

Limitations & cautions

A mixed folder of scans and native files leans on OCR for the images, so review low-confidence markings. The shared map can re-link the set if kept; turn it off when you need true anonymity.

Frequently asked questions

How does batch mode keep one person steady?

A shared map logs each person once, so the same name maps to the same code in every file across the folder.

How long should a performance archive be kept?

Set a period and justify it. Article 5(1)(e) allows no longer than necessary. Tribunal claims are normally brought within three months under section 111(2) of the Employment Rights Act 1996 and section 123 of the Equality Act 2010, though longer contract limitation periods and appeals may justify keeping some records for longer.

How many files can one run handle?

Up to 20 per batch, all processed locally with OCR for any scanned pages.

Does batch work upload anything?

No. The whole run is offline, so the archive stays on your machine.