GDPR Compliance
Support GDPR workflows with AI-assisted detection and human final review.
GDPR in the redaction workflow
Step 1
Lawful basis
Processing within FOI/public task mandate.
Step 2
Data minimisation
Process only necessary fields and documents.
Step 3
Security
Access through user accounts and human review of AI suggestions before export (GDPR Art. 32).
Step 4
Accountability
Redaction and export decisions are recorded in an audit log: who, when, which decision and which legal ground (exemption), without the document text itself.
FAQ – GDPR and redaction
Does Anonify support GDPR Art. 25?
Yes: minimisation, security by default, and logging are built in.
How do you handle access requests?
Processing follows your procedure; we provide processor documentation.
GDPR vs FOI redaction?
FOI governs disclosure; GDPR requires protecting personal data. Both apply.
GDPR Article 25: Data Protection by Design
Anonify implements privacy by design by automatically detecting and anonymizing personal data before documents are shared or published.
- ✓Automatic detection of personal data
- ✓Privacy by default implementation
- ✓Data processing minimization
GDPR Article 32: Security of Processing
Hosted with Hetzner in Germany. Confirm access arrangements, storage, deletion and backups before using sensitive documents.
- ✓Infrastructure-provider certifications must be assessed separately and do not certify Anonify itself.
- ✓Hosted with Hetzner in Germany. Confirm access arrangements, storage, deletion and backups before using sensitive documents.
- ✓Processed in the EU
Human review
Personal Data Detection
AI-assisted PDF redaction with human final review. Your organization decides what may be disclosed.
Document anonymization
Redaction and export decisions are recorded in an audit log: who, when, which decision and which legal ground (exemption), without the document text itself.
Secure Processing
All processing happens in secure hosted environments