Talent Vendor Data Redaction with anonym.plus

Strip identifiers before talent records go to an outside processor.

Talent vendor data redaction is the removal of identifiers from people records before they reach a processor. UK GDPR Article 28 governs what a controller may hand to a supplier and requires a written contract. anonym.plus marks each name on your device, so you share only what the task needs and nothing more.

When this applies

An HR team sends a file to an assessment partner. You strip the identifiers first, so the transfer honours the Article 28 duty to limit what a processor receives.

How anonym.plus handles it

  1. Open the file in anonym.plus on your device.
  2. Built-in OCR reads any scanned source page.
  3. The app marks names, emails, and IDs.
  4. Confirm the markings and keep the fields the partner needs.
  5. Swap each identifier for a code.
  6. Save the minimised set locally, then transfer it.

What you need to provide

PII entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONLena Rowe → SUBJ_44
ContactEMAIL_ADDRESSl.rowe@example.co.uk → [EMAIL]
ContactPHONE_NUMBER+44 161 496 0720 → [PHONE]
OrgORGANIZATIONFinance Unit → [UNIT]
IdentifiersUK_NINOQQ 12 34 56 C → [NINO]
LocationLOCATIONCoventry office → [SITE]

Compliance achieved

Anonymise talent vendor data sets offline — see plans & start free →

Limitations & cautions

Article 28 still applies if a supplier can re-identify the people. A held alias map or rich quasi-identifiers may keep the set personal in the supplier's hands. Share the map only under contract, or leave it off.

Frequently asked questions

Does Article 28 require full anonymisation?

Not always, but it requires a written contract and data minimisation. If the supplier can still re-identify people, the set stays personal and the Article 28 duties apply.

Should I share the alias map with the partner?

Only if the contract requires it. For a fully minimised transfer, leave the map with the controller.

Is the source set uploaded?

No. The app is fully offline. You control when the minimised copy goes out.