Loan-agreement redaction is the removal of borrower financial PII from a credit file. Where the loan is secured by a company charge, CA 2006 s.859A gives 21 days to deliver the particulars to Companies House. s.859G then allows the instrument to be redacted before public inspection: personal information other than a name, account identifiers, and signatures. anonym.plus makes those same removals on your device.
When this applies
The file holds account numbers, income figures, and identity fields. If the loan is secured, a copy of the instrument reaches the Companies House register, where s.859G permits exactly three classes of redaction. Those three are also the first things to clear from any copy you send to a servicer or auditor.
How anonym.plus handles it
- Load the file into anonym.plus on your device.
- The tool flags their name, account, and income.
- It catches the National Insurance and tax numbers as identity fields.
- Confirm the flags and keep the rate and term text.
- Swap or black out the confirmed data.
- Save the clean file on your machine.
What you need to provide
- The credit file (PDF, DOCX, or scan).
- An operator (Redact for slim disclosure copies).
- Optional steady label map across linked schedules.
PII entity types detected
| Category | anonym.plus entity type | Example |
|---|---|---|
| Names | PERSON | borrower name → [BORROWER] |
| Banking | IBAN_CODE | loan account → [ACCOUNT] |
| Identifiers | UK_NINO | QQ 12 34 56 C → [NINO] |
| Pay | MONEY | income → [INCOME] |
| Identifiers | NATIONAL_ID | tax reference → [TAX_ID] |
| Contact | PHONE_NUMBER | +44 7700 900456 → [PHONE] |
Compliance achieved
- Mirrors the redactions CA 2006 s.859G allows on a charge instrument: personal information other than a name, account identifiers, signatures.
- Supports the 21-day filing window in CA 2006 s.859A by preparing the copy offline.
- True anonymity puts the shared copy outside scope on the UK GDPR Recital 26 test.
- Local work keeps lending records off the cloud.
- On-device AES-256-GCM guards the working files.
Anonymise loan agreements offline — see plans & start free →
Limitations & cautions
UK GDPR Recital 26 requires that no one can reasonably re-identify the borrower. The tool removes named account and identity fields. You still judge whether a rare principal amount plus a date could point back to one person.
Frequently asked questions
What may be redacted from a charge instrument at Companies House?
CA 2006 s.859G allows three classes: personal information relating to an individual other than their name, the number or identifier of a bank or securities account, and a signature. Everything else on the instrument goes on public inspection. The same three make a sensible first pass on any copy you share.
Why work locally for lending records?
Sending borrower details to a cloud tool is itself a disclosure. Local work keeps the file inside your institution and removes that step entirely.
Does the Consumer Credit Act change this?
It can. Where the borrower is an individual, the agreement may be a regulated agreement under the Consumer Credit Act 1974, which adds its own copy and information duties. Those duties attach to the original, so redact only the copy you circulate.