Recruitment vendor data redaction is the removal of personal information from a file bound for a processor. UK GDPR Article 28 governs the controller-processor relationship and its scope. anonym.plus marks identifiers on your device, so a vendor receives only the minimum the role requires.
When this applies
An agency brief or shortlist often carries more personal detail than a vendor needs. You trim the extra identifiers before the handoff under Article 28.
How anonym.plus handles it
- Open the file in anonym.plus on your device.
- Built-in OCR reads a scanned shortlist page.
- The app marks names, contacts, and references.
- Confirm each marking and keep role-relevant fields.
- Swap or black out the confirmed identifiers.
- Save the minimised file locally.
What you need to provide
- The vendor-bound file (PDF, DOCX, CSV).
- An operator (Replace keeps the brief readable).
- Optional batch for a full shortlist.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | shortlisted Bauer → [CANDIDATE] |
| Contact | EMAIL_ADDRESS | bauer@example.co.uk → [EMAIL] |
| Contact | PHONE_NUMBER | +44 121 496 3310 → [PHONE] |
| Identifiers | UK_NINO | QQ 12 34 56 C → [NINO] |
| Location | LOCATION | home town → [LOCATION] |
| Org | ORGANIZATION | current firm → [EMPLOYER] |
Compliance achieved
- Supports minimisation for a processor under UK GDPR Art. 28.
- Shares only the fields the role and contract require.
- Offline work keeps candidate detail off any server.
Anonymise recruitment vendor files offline — see plans & start free →
Limitations & cautions
Article 28 requires a written processor contract and safeguards this app does not provide. It minimises fields only. Keep a compliant data-processing agreement in place with the vendor.
Frequently asked questions
What does Article 28 require of a processor?
UK GDPR Art. 28 requires a written contract and safeguards. anonym.plus supports the minimisation part by trimming fields before sharing.
Can I keep role-relevant fields?
Yes. Allow-list the fields the vendor needs. Only extra identifiers are removed.
Is the file uploaded?
No. The app runs locally, so candidate detail stays with you until you send it.