Executed-contract redaction is the removal of PII from a signed contract. UK GDPR Recital 26 puts truly anonymous data outside the regulation. DPA 2018 s.3(2) sets the matching test for what still counts as personal data. anonym.plus applies both on your own device, and the commercial terms stay readable.
When this applies
You send a signed contract to a lender's solicitors, an auditor, or a data room. Its execution block already names the people CA 2006 s.44(2) puts there. Companies House publishes a director's name, but not their home address, and your copy holds both. That surplus is what you clear first.
How anonym.plus handles it
- Open the file (PDF, DOCX, or scan) in anonym.plus on your device.
- Local OCR reads scanned pages, so signed schedules work too.
- The tool flags party names, addresses, emails, and bank details.
- Check each flag and keep any defined term you need.
- Swap each ID for a label, or black it out.
- Save the clean copy. Nothing leaves your machine.
What you need to provide
- The file (PDF, DOCX, TXT, or image scan).
- An operator: Replace (swap), Redact (remove), or Mask (partial).
- Optional: a name map if you must re-link parties later.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Parties | PERSON | Charlotte Hughes → [PARTY_1] |
| Company | ORGANIZATION | Pennine Trading Ltd → [COMPANY] |
| Contact | EMAIL_ADDRESS | c.hughes@pennine.co.uk → [EMAIL] |
| Banking | IBAN_CODE | GB29 NWBK ... → [IBAN] |
| Location | LOCATION | 12 High Street, Leeds → [ADDRESS] |
| Dates | DATE_TIME | signed 03/11/2026 → [DATE] |
Compliance achieved
- True anonymity puts the result outside scope on the UK GDPR Recital 26 test.
- Clears anything that identifies a living person under DPA 2018 s.3(2).
- Flags the signatories CA 2006 s.44(2) puts in a company execution block.
- Local work preserves the contract's confidentiality clause.
- Catches 340+ PII types across 48 languages, with AES-256-GCM at rest.
Anonymise executed contracts offline — see plans & start free →
Limitations & cautions
True anonymity is a high bar. A rare term plus a known sector can still hint at a party. If you keep a reversible map, the output is pseudonymous, not anonymous, and stays in scope. Weigh the residual risk first.
Frequently asked questions
Does this keep my confidentiality clause intact?
Yes. The file never leaves your device, so no third party sees it. That preserves the duty of confidence the clause sets, since there is no outside disclosure during the work.
Anonymous or pseudonymous — what is the difference?
Pseudonymous output keeps a key that can re-link parties, so it stays personal data. Anonymous output drops that key for good. Only then does Recital 26 take the file out of scope, and only then does DPA 2018 s.3(2) stop treating it as data about a living individual.
Who is named in a company execution block?
Under CA 2006 s.44(2) a company signs through two authorised signatories, or through one director whose signature a witness attests. Every one of those roles is a real person. The tool flags their printed names, titles, and any address on the page.