Purchase Order Redaction with anonym.plus

Clear buyer contacts from a purchase order while the line items stay.

In simple terms, PII redaction is the on-device process of finding and masking personally identifiable information in a document before it is shared.

Purchase-order redaction is the removal of buyer and contact PII from a PO. A UK company's order forms must already show its registered name, its registered number, and its registered office, a duty in CA 2006 s.82 and the trading-disclosure regulations made under it. Those company particulars are public. The requester's name, direct line, and delivery address are not, and those are what you clear.

When this applies

A PO names the buyer, the requester, and a ship-to address. Late payment on it carries statutory interest of 8% above the Bank of England base rate under the Late Payment of Commercial Debts (Interest) Act 1998, so the paperwork travels between finance, audit, and sometimes solicitors. You clear the personal fields before it goes for spend analysis.

How anonym.plus handles it

  1. Load the order into anonym.plus on your device.
  2. The tool flags buyer, requester, and contact fields.
  3. It catches the ship-to address.
  4. Confirm the flags and keep the line items.
  5. Swap or black out the IDs.
  6. Save the clean order on your machine.

What you need to provide

PII entity types detected

Categoryanonym.plus entity typeExample
NamesPERSONrequester → [BUYER]
CompanyORGANIZATIONsupplier → [SUPPLIER]
LocationLOCATIONship-to → [ADDRESS]
ContactEMAIL_ADDRESSbuyer email → [EMAIL]
ContactPHONE_NUMBERbuyer tel → [PHONE]
DatesDATE_TIMEorder date → [DATE]

Compliance achieved

Anonymise purchase orders offline — see plans & start free →

Limitations & cautions

A ship-to address can hint at the buyer even after names go. Broaden it where the analysis allows. Bulk CSV orders mix tidy columns with free-text notes, so review those notes too.

Frequently asked questions

What must a UK order form already show?

CA 2006 s.82 and the trading-disclosure regulations made under it require a company's registered name, registered number, place of registration, and registered office address on its order forms and business letters. That is company information, not personal data, so it can stay. The named requester behind it is a different matter.

Can the line items stay?

Yes. Line items, quantities, and prices stay, and only buyer and contact data changes. Keeping them is the point of a PO sent for spend analysis.

Is the ship-to address removed?

By default, yes, because a precise delivery address is location data and often identifies a site or a person. Keep a broad region via an allow-list where the analysis genuinely needs one.