How to remove personal data from a document: four methods compared
The short answer. Really removing personal data means: the values are gone from the text and the metadata, and nobody can bring them back from the file. Black bars in a PDF usually fail that test; the text is still underneath. Rewriting by hand works, but it takes time and it's easy to miss something. The most practical route, and the easiest to check, is automatic detection with a review step. ShareSafe.ai finds names, organisations, addresses, account numbers and amounts and shows you what it found. You decide what gets replaced before you download a protected file.
Four methods, compared honestly
| Method | Does it work? | Risk |
|---|---|---|
| Black bars (PDF markup) | Often not | The text sits under the bar and can be copied or searched |
| Manual rewriting | Yes, if complete | Slow, inconsistent, indirect identifiability gets missed |
| Word document inspector | Metadata only | Author and revisions disappear, the content stays |
| Automatic detection + review | Yes, with review | Detection can miss something, which is why review is a mandatory step |
The most notorious failure is method 1. There are plenty of public incidents where "redacted" documents turned out to be fully searchable. A bar over text is formatting, not removal.
What counts as personal data in a document?
More than names. GDPR counts everything that identifies a person directly or indirectly:
- names, email addresses, phone numbers, addresses;
- national ID numbers, employee numbers, case numbers, licence plates, IBANs;
- job titles in small organisations ("the controller of...");
- combinations of date, place and event;
- signatures and handwritten notes;
- metadata: author, company name, revision history.
Indirect identifiability is what manual work misses most. One stray detail is rarely a problem; three details together point at one person.
Amounts are a separate question: they can be confidential, and a salary says something about a person. If you hand the document to an AI: replace data the task doesn't need. Leave amounts the model has to compare or calculate with.
Remove or replace?
ShareSafe replaces personal data with placeholders. Contract terms, trade secrets or medical content stay readable. In the review step you can select extra text and have it replaced too. You choose one of two modes:
- Permanent replacement: the values are replaced and no key is created. Nobody can put them back. Choose this for publication, archiving or sharing outside your organisation. It does not by itself make the document anonymous: other details in the text can still point to someone, so check those during review.
- Reversible replacement: the values become consistent placeholders ([NAME_01], [ADDRESS_01]) and you get a recovery key (Identity Key) to put them back. ShareSafe Free keeps no copy. Choose this when you still want to use the document with AI or need to map results back. The difference explained: Pseudonymisation vs anonymisation.
In three steps
- Drop your PDF, Word, Excel or text file into ShareSafe.ai. Up to 25 MB, no account.
- Check the before and after view. Everything detected is marked per category. Missing something? Add it.
- Choose permanent or reversible replacement and download the protected file, plus the processing receipt.
Processing happens in the EU and your document is not kept as a file.
FAQ
- Does this remove metadata too?
- The protected file is rebuilt from the document's content; detected personal data you choose to replace leaves the text. Document properties of your original (author, company name, revision history) fall outside content detection. For high-sensitivity material, check those yourself or remove them in your word processor first. The before and after view shows what was found in the content.
- Is the protected document still usable?
- Yes, that is the point of consistent placeholders. "[NAME_01] invoices [ORG_02] for €12,400" remains a readable, analysable document, just without the real name and company.
- Can I do an entire case file at once?
- ShareSafe Free works per document. For recurring files and team work there is ShareSafe Workspace, where your team keeps protected files in vaults and shares them via links.
- What if detection misses something?
- That is why the tool shows everything it found and lets you add items before downloading. No automatic detection is infallible; detection plus human review is the safer method.
ShareSafe.ai keeps raw files in the EU. Minimal retention. You hold the key. Try it with your own document →