GDPR · SMEs · Professionals across the EU
GDPR document redaction: a workflow small teams can actually run
Large organizations have privacy teams and dedicated tools. A ten-person agency, a medical practice or a freelance consultant usually has a shared folder, a PDF editor and good intentions. Yet the obligations are the same: when you answer a subject access request, send a file to a supplier or share a case with an adviser, the GDPR expects you to disclose only the personal data that purpose needs.
Anonimatum Pro from €19.90/month, VAT included.
Anonimatum turns that into a short, repeatable routine. Its own AI models, running on EU servers, flag names, email addresses, phone numbers, addresses, IBANs, dates and amounts in PDF, Word, Excel and PowerPoint files. You review every match, keep what must stay visible and apply real redaction: the text is removed from the file, and so is its metadata.
Outside Spain you can get started on your own: Anonimatum Pro is bought online for €19.90 per month or €199 per year, VAT included. In Spain, or if your team needs batch processing, shared templates or API integration, we will put together a proposal sized to your volume.
A four-step redaction routine
- 1
Collect the documents
Gather the files for one disclosure (an access request, a supplier dispute, a complaint) and upload them individually or as a ZIP.
- 2
Detect personal data
Run the AI option «GDPR anonymization» and add patterns for email addresses or IBANs, plus word sets with client or staff names.
- 3
Review against the purpose
Check each match in the preview: keep what the recipient is entitled to see, whitelist recurring exceptions and untick false positives.
- 4
Redact and repeat
Apply redaction, download the files in their original format and save the configuration as a template for next time.
Fictitious document
Before and after: a supplier dispute
Fictitious email forwarded to an external adviser. The customer's and the driver's details are removed; the dispute itself stays easy to follow.
From: Anna Becker <a.becker@example-mail.eu>
To: Accounts, Nordwind Logistics
Re: invoice 2025-118, delivery of 14 March
The pallets were left at Lindenstraße 12, 10115 Berlin with no delivery signature.
Please refund €840 to DE00 0000 0000 0000 0000 00.
Your driver, Tomasz Nowak, said he had no instructions.
Call me on +49 000 0000000 if you need photos.
From: (redacted) <(redacted)>
To: Accounts, Nordwind Logistics
Re: invoice 2025-118, delivery of 14 March
The pallets were left at (redacted) with no delivery signature.
Please refund €840 to (redacted).
Your driver, (redacted), said he had no instructions.
Call me on (redacted) if you need photos.
The invoice number, date and amount stay because the adviser needs them to assess the claim; the people, address, IBAN and phone number go.
What makes redaction GDPR-ready
Purpose first
Redaction is data minimization in practice: decide what the recipient needs, then remove everything else, not the other way round.
Real removal
A black box drawn on top can be copied away. Anonimatum removes the underlying text and the metadata, so what you send is what you see.
Human review
Automatic detection speeds things up; the preview keeps a person accountable for what is disclosed, which is what a supervisory authority will ask about.
EU processing
Documents are processed on EU servers by Anonimatum's own models, with no calls to external LLM APIs, and deleted after processing.
GDPR document redaction: frequently asked questions
Is redaction the same as anonymization under the GDPR?
Not necessarily. Redaction removes data from a specific document; the result is anonymous only if nobody can reasonably identify the people from what is left. For most disclosures the goal is data minimization, and redaction is the tool for it.
Can I use it to answer subject access requests?
Yes. A typical use is providing a copy of a file to the person who asked while removing the data of third parties mentioned in it, such as colleagues, other customers or witnesses.
Which file types are supported?
Native and scanned PDFs (with OCR), Word, Excel, PowerPoint, OpenDocument files and ZIP archives. Office files are redacted in their original format, without converting them to PDF.
Does it detect national ID numbers from my country?
The built-in ID patterns are designed for Spanish documents. For other countries, detection covers names, email addresses, phone numbers, addresses, IBANs, dates and amounts, and you can add your own patterns for formats such as customer or staff numbers.
How do I buy it?
Outside Spain, Anonimatum Pro is available online at app.anonimatum.com for €19.90 per month or €199 per year, VAT included. For teams, batch volumes or API access, contact us for a quote.
Make redaction a routine, not a risk
Start with Anonimatum Pro online, or tell us about your team's documents and we will suggest the right setup.
Get AnonimatumNot in Spain?