Whistleblowing report redaction is the removal of data that could expose the source. The Public Interest Disclosure Act 1998 (PIDA) protects a worker who makes a protected disclosure. anonym.plus strips names and contacts on your device, so no clue leaks.
When this applies
A disclosure reaches your compliance team and must move to investigators. The source's name, email, and writing style can give them away if the file is shared raw.
How anonym.plus handles it
- Open the report in anonym.plus on your device.
- The tool flags the source's name, email, and phone.
- It also flags named colleagues and accused parties.
- Confirm each flag, then redact or swap it.
- Save the protected copy with no network call.
What you need to provide
- The report (PDF, DOCX, TXT, or web-form export).
- An operator: Redact to remove, Replace for a readable copy.
- Optional allow-list to keep generic role terms.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | source Daniel Owusu → [DISCLOSER] |
| Contact | EMAIL_ADDRESS | d.owusu@corp.co.uk → [EMAIL] |
| Contact | PHONE_NUMBER | 07700 900221 → [PHONE] |
| Names | PERSON | accused manager → [SUBJECT] |
| Location | LOCATION | Manchester site → [LOCATION] |
| Identifiers | UK_NINO | staff no. A4471 → [ID] |
Compliance achieved
- Supports identity confidentiality under the Public Interest Disclosure Act 1998 (PIDA).
- Local processing keeps the discloser's clues off any cloud.
- On-device AES-256-GCM guards the working files.
- Anonymous output sits outside scope by UK GDPR Recital 26.
Anonymise whistleblowing reports offline — see plans & start free →
Limitations & cautions
Names and contacts go, but writing style and rare facts can still point to a source. Review the narrative for tell-tale detail. The tool removes direct IDs; a human must judge indirect identity clues.
Frequently asked questions
How does offline work protect a whistleblower?
The report stays on your own device. Nothing is uploaded, so the person's name and contacts never travel through a cloud service that could leak or be disclosed.
Does PIDA require this redaction?
PIDA protects a worker who makes a qualifying disclosure from detriment. Stripping direct IDs before the file is shared internally supports that protection in practice.
Can I keep the substance of the disclosure?
Yes. The allegations and evidence stay. Only data that points to the source or named parties is removed or swapped.