SAR redaction is the removal of personal data from a Suspicious Activity Report. The Proceeds of Crime Act 2002 (POCA) governs the SAR made to the National Crime Agency (NCA). anonym.plus strips names and account IDs on your device, narrative left whole.
When this applies
An anti-money-laundering team must share a SAR internally for review or training. The file names the customer, the account, and the reporter, all of which can be cleared.
How anonym.plus handles it
- Open the report in anonym.plus on your device.
- The tool flags customer, reporter, and beneficiary names.
- Account and transaction IDs get flagged too.
- Swap each confirmed item for a steady label.
- Save the protected copy with no network call.
What you need to provide
- The SAR (PDF, DOCX, or e-filing export).
- An operator: Mask keeps part of an account number visible.
- Optional label map to keep one customer steady.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | subject customer → [CUSTOMER] |
| Names | PERSON | nominated officer → [REPORTER] |
| Financial | UK_BANK_NUMBER | 20-00-00 44718820 → [ACCOUNT] |
| Identifiers | UK_NINO | QQ 12 34 56 C → [NINO] |
| Dates | DATE_TIME | activity 02 Feb → [DATE] |
| Financial | IBAN_CODE | wire IBAN → [IBAN] |
Compliance achieved
- Supports controlled handling of the SAR to the NCA under POCA 2002.
- Local work keeps the disclosure off any cloud service.
- On-device AES-256-GCM guards the working files.
- Masks part of an account number when full removal is not needed.
Anonymise suspicious activity reports offline — see plans & start free →
Limitations & cautions
SAR confidentiality and tipping-off rules under POCA limit who may see a disclosure. Redaction does not lift that duty. Confirm the reader is allowed access first. The tool removes named IDs, not the legal limits on disclosure.
Frequently asked questions
Can I share a SAR freely after this?
No. POCA tipping-off and confidentiality rules limit who may see a SAR even once it is cleaned. Confirm the reader is permitted before you share any version.
Why process the disclosure offline?
A SAR is highly sensitive. Local work keeps the customer and account data off any cloud service, which lowers leak and breach risk.
Can I keep part of an account number?
Yes. The Mask operator hides most digits and leaves a few, so reviewers can still match records without seeing the full number.