Redactic replaces names, tax codes, social security numbers, IBANs and the other identifiers it detects with placeholders before the model receives your message, then puts the real values back in your browser. It confirms national identifiers by their check characters where the format has one and redacts payroll exports column by column while gross and net pay stay readable. Detection and masking run in Europe, and your files are not kept.
Payslips, payroll journals, annual tax certificates, tax and social security payment forms, bank transfer lists and exports from your payroll software, in PDF, Word, Excel or CSV, or as scans.
Permanently black out data directly on the document. Ideal for securely sharing files with third parties.
Replace sensitive data with placeholders before using AI. Restore the original values in the final output.
Below is a fictitious payroll summary, as a payroll bureau would send it to a client's auditor. Redactic finds the personal data, confirms the Italian tax codes and the IBANs by their check characters and leaves the pay amounts untouched.
| Field in the document | Type of data | How Redactic handles it | Check character verified |
|---|---|---|---|
| Luca Moretti, Elena Galli | Person names | Recognised; with the name list or a name column, certain in every form | Not applicable |
| MRTLCU85C14F205R, GLLLNE90S42L219P | Italian tax code (codice fiscale) | Recognised, with or without a label | Yes |
| IT82D0306909606000000654321, IT40U0503401600000000987654 | IBAN | Recognised | Yes |
| +39 02 4471 2290 | Phone number | Recognised | Not applicable |
| P-0412 | Employee number | Masked with one click, or added to your list | Not applicable |
| EUR 2,950.00, EUR 2,104.37, EUR 3,420.00, EUR 2,388.15 | Gross and net pay | Kept | Not applicable |
| Column header | Type Redactic proposes | Your choice |
|---|---|---|
| Matricola (employee no.) | None proposed (Auto) | Redact all |
| Dipendente (employee) | Person | Mask the whole column |
| Codice fiscale (tax code) | ID number | Mask the whole column |
| Data di nascita (date of birth) | Dates of birth | Mask the whole column |
| IBAN | IBAN / bank account | Mask the whole column |
| Reparto (department) | None proposed (Auto) | Keep |
| Lordo, Netto (gross, net) | None proposed (Auto) | Keep |
Fictitious data. Gross pay, net pay and the structure of the file stay as they are, so the auditor can check the figures without seeing who earns them.
With Firm, everyone who handles payroll writes to the Secure Chatbot with real names and identifiers, asks for an opinion on a case or a note for a client company, and Redactic masks the personal data in every message before the model receives it. The answer comes back masked and each person's browser puts the real values back in. If masking is not available, the message is not sent.
The chat keeps no conversation on our servers, masking runs in Europe on infrastructure Redactic controls, and the people who manage your workspace decide who uses the chat and how much AI each person can use. Document redaction for up to 50 users is part of the same plan.
With Norway or Denmark among the countries of the conversation, a fødselsnummer or a CPR number typed without a label is masked as well, and Germany does the same for the tax ID number.
Running a payroll bureau with many users? Enterprise adds unlimited users, volumes and AI quotas tailored to each team, a DPA built around your policies, and dedicated, single-tenant, private-cloud or on-premise deployment.
Working on your own? With Solo you have the same protection in the document chat: the file reaches the AI already masked, and the names you type in your questions are masked before they are sent.
Add PDF payslips, scans, a Word file, an Excel (.xlsx) or CSV export from your payroll software, or paste the text. Choose the countries of the document, and in a spreadsheet Redactic proposes a type for each column whose header it recognises, on every sheet of the workbook, for you to confirm or change. Headers for employee names, tax and social security numbers, bank accounts and dates of birth are recognised in fourteen languages.
Mask whole columns of names, tax codes, IBANs and dates of birth and keep the columns with gross and net pay. In a payslip or a letter, redact all, keep all or decide item by item, and select any word in the text to mask it as well.
Download the spreadsheet with the sensitive columns masked and its structure and amounts intact, or the PDF with Blackout and the redaction certificate. Or open the document chat and ask your questions with the names as they appear in the file: Redactic masks them before sending, and the answer comes back with the real names on your device.
In the Secure Chatbot and in the document chat, Redactic masks the personal data it detects before the model receives the text, and the answer is restored in your browser. If masking is not available, nothing is sent.
Redactic confirms the Italian codice fiscale, the French NIR, the German social insurance number, the Spanish DNI and NIE and IBANs from every country by their check characters, in any document and even without a label. With their country among the countries of the document, it does the same for the German tax ID number, the Spanish social security number, the Norwegian fødselsnummer, the Swedish personnummer, the Polish PESEL and the Dutch BSN.
In an Excel or CSV file, Redactic proposes a type for each column whose header it recognises, you confirm or choose, and every cell of the columns you mask is covered while gross pay, net pay and the structure of the sheet stay as they are.
Payslips scanned or photographed are read with OCR first, and the text under every black box is deleted from the exported PDF, so it cannot be selected, copied or recovered.
The redaction certificate records the SHA-256 fingerprint of the file before and after, and how many items of each type were removed. It contains no content from the document, so you can keep it in the file or attach it.
Detection and redaction run in Europe on infrastructure Redactic controls, without third-party AI reading the unredacted text. Your files are not saved, and the data processing agreement under GDPR art. 28 is signed when you subscribe.
These are the rules your work answers to. Next to each one is what Redactic actually does, so you can judge for yourself how it fits your practice.
Processing data that reveals religious beliefs or trade union membership is prohibited unless an exception in art. 9(2) applies, and payslips can carry both: the German pay statement shows the church tax details, and a deduction for union dues shows membership. With Redactic you decide field by field what stays in the copies you share, and the AI receives placeholders for the identifiers Redactic detects.
Your firm decides why and how client documents are processed; Redactic acts as your processor under a data processing agreement signed when you subscribe.
Article 32 names pseudonymisation among the measures for the security of processing. Redactic pseudonymises personal data before any AI step, runs detection in Europe and keeps neither your files nor your conversations.
Only the data a purpose needs should be processed. An auditor checking staff costs needs the amounts, and the masked export keeps them while names, tax codes and IBANs give way to placeholders; the AI receives the masked text.
Redactic describes what its tools do; the assessment of your own processing remains yours, with the support of the DPA and the Trust & Security page. Security
Every payslip carries personal data because the law requires it. The table lists, for sixteen countries, what the law requires the employer to give the employee with the pay and which of those fields concern the employee, with a link to the official text, and the data among them that needs the most care when a payslip leaves the firm. Where a country's text sets only a short minimum, or no list at all, the row says so.
Checked against the official texts on 5 November 2026.
| Country | Legal source | Fields about the employee that the law requires | Data that needs the most care |
|---|---|---|---|
| United Kingdom (England, Wales and Scotland)Your country | Employment Rights Act 1996, s. 8 Employment Rights Act 1996, s. 8 | A written itemised pay statement at or before each payment: gross pay; every fixed and variable deduction and its purpose; net pay; the amount and method of each part-payment; the hours worked when pay varies with time worked | The section requires no identifier; the stated purpose of each deduction shows what the employee pays through payroll. |
| IrelandYour country | Payment of Wages Act 1991, s. 4 Payment of Wages Act 1991, s. 4 | A written statement with each payment of the gross wages and of the nature and amount of every deduction | The section requires no identifier, and s. 4(1) obliges the employer to keep the statement confidential, also towards its agents and other employees. |
| Austria | Income Tax Act 1988 (EStG), § 78(5) EStG § 78 | A statement no later than the payment for the month: gross pay; contribution base and compulsory contributions; tax base; base and contribution for the employee severance fund (Mitarbeitervorsorgekasse); the Familienbonus Plus taken into account; income tax | The Familienbonus Plus amount reflects the employee's children. |
| Czech Republic | Labour Code (zákoník práce, 262/2006 Sb.), § 142(6) 262/2006 Sb., § 142 | At the monthly pay settlement, a written document with the individual components of pay and the deductions made | The deductions made. |
| Denmark | Withholding Tax Act (kildeskatteloven), § 84(1) Kildeskatteloven | A written or other readable statement to the recipient of the income tax (A-skat) and labour market contribution withheld; the details are set by ministerial order | The tax withheld. |
| Finland | Employment Contracts Act (työsopimuslaki, 55/2001), ch. 2, § 16(2) Työsopimuslaki 55/2001 | With each payment, a statement showing the amount of pay and the grounds on which it was determined; refusing it on request is an offence under the act | The grounds on which the pay was determined. |
| France | Labour Code (Code du travail), art. R3243-1 Code du travail, R3243-1 | Name and job of the employee and position in the collective classification; period and hours worked, with overtime and its rates; gross pay; contributions; base, rate and amount of income tax withheld at source; net pay and payment date; dates of paid leave and the holiday pay; hours of partial activity | The rate of income tax withheld at source and the leave dates. The article does not list the social security number (NIR). |
| Germany | Trade Regulation Act (GewO), § 108, and Pay Statement Regulation (EBV), § 1 and § 2 GewO § 108EBV § 1EBV § 2 | Name, address and date of birth; social insurance number; start date of employment, and the end date on the last statement; tax class, child allowances, church tax details and tax ID number; contribution group code; a code for the number of children counted for long-term care contributions; every item of pay and every deduction | Tax ID number and social insurance number. The church tax details show church membership, and § 2(2) EBV allows the employee to black them out. |
| Italy | Law no. 4 of 5 January 1953, art. 1, and Decree-Law no. 112 of 25 June 2008, art. 39 L. 4/1953, art. 1D.L. 112/2008, art. 39 | Name, surname and job title; pay period; family allowances; every item of pay and each deduction; code of the collective agreement. A copy of the entries in the single employment register (LUL), which art. 39(5) accepts as the payslip, adds the tax code, level, base pay, seniority, social insurance positions, tax deductions, family allowance data, social security benefits and the attendance calendar with absences, holidays and rest days | Tax code (codice fiscale), family allowance data and day-by-day absences. |
| Netherlands | Civil Code, Book 7, art. 626 BW 7:626 | Names of employer and employee; pay period; gross pay and its components; every deduction; the statutory minimum hourly wage for a person of the employee's age; agreed working hours; whether the contract is a written permanent contract and whether it is an on-call contract | The minimum wage shown depends on the employee's age, and the contract lines show the type of employment. |
| Norway | Working Environment Act (arbeidsmiljøloven), § 14-15 Arbeidsmiljøloven § 14-15 | A written statement, at or right after payment, of how pay was calculated, of the basis for holiday pay and of the deductions made | Deductions can include union dues set by a collective agreement (§ 14-15(3)(d)), which show trade union membership. |
| Poland | Social Insurance System Act, art. 41(8) and 41(8b), with art. 41(3) and art. 35(1a) Dz.U. 2026 poz. 199 | The contribution payer passes the monthly contribution reports to the insured person, for the past year by 28 February and for the previous month on request: PESEL (or ID card or passport number), surname and first name, working time, contribution bases and amounts for each insurance, the health insurance contribution | PESEL. |
| Romania | Labour Code (Codul muncii), art. 163 and art. 168 Codul muncii | The Labour Code contains no content list for an individual payslip: payment of the salary is proven by signed payroll sheets and other supporting documents (art. 168(1)) | Art. 163(1) makes the salary confidential and requires the employer to take the measures needed to keep it so. |
| Slovenia | Employment Relationships Act (ZDR-1), art. 135(2) to (4) Uradni list RS 21/2013 | By the end of pay day, a written statement of pay, wage compensation, reimbursed work expenses and other receipts, the calculation and payment of taxes and contributions and the pay day, with data on the employee and the employer; by 31 January, an annual statement for the previous year | The data on the employee and the wage compensation for absences. The statement is an authentic document on which the employee can seek enforcement (art. 135(3)). |
| Spain | Order of 27 December 1994 on the pay slip model, annex as amended by Order ESS/2098/2014, under art. 29.1 of the Workers' Statute Orden ESS/2098/2014 | Name, tax ID (NIF) and social security affiliation number; professional group and contribution group; settlement period; salary and non-salary items, social security benefits included; employee contributions; income tax (IRPF) withheld; advances and other deductions | NIF and social security affiliation number. |
| Sweden | Tax Procedure Act (skatteförfarandelagen, 2011:1244), ch. 10, § 19 SFS 2011:1244 | At each payment, the amount of tax withheld; the act sets no wider content list | The tax withheld. |
The cited texts set a minimum, and a payslip can carry more fields than these. Redactic masks the identifiers in these fields before any AI step and lets you decide field by field what stays in the copies you share.
Yes. With Firm, the Secure Chatbot masks the names, tax codes, IBANs and other personal data it detects in every message before the model receives it, and your browser puts the real values back in the answer. On every plan, the document chat masks the file before the AI sees it and masks the names you type in your questions too.
The question to settle is what the model receives. With Redactic the payroll file is masked before any AI step, so the model works on placeholders and the real names and identifiers return only in your browser. The firm keeps one tool for everyone, with access and AI quotas decided by whoever manages it.
Look for one that pseudonymises the data before the model receives it, runs detection in Europe, keeps no files or conversations and signs a data processing agreement under GDPR art. 28. Redactic does each of these, and with Firm it gives the whole bureau a secure chat with an AI quota for each person.
Not on Redactic's servers. The Secure Chatbot keeps no conversation history, the conversation lives in your browser, and the map of placeholders is not retained between messages. The AI provider of the workflow you use receives only the masked text, under the terms set out in the DPA.
Yes. Redactic recognises the Italian codice fiscale wherever it appears, in running text or in a table cell, with or without a label, and confirms it by its check letter, omocodia codes included; a code with a mistyped check letter is masked as well. The French NIR, the German social insurance number and the Spanish DNI are confirmed the same way in any document, and the German tax ID number or the Norwegian fødselsnummer when their country is selected.
Yes. Redactic proposes a type for each column whose header it recognises, you confirm or choose the treatment for every column, and the columns you mask are covered cell by cell on every sheet while the amounts and the structure of the file stay as they are.
Yes. With Firm, up to 50 people have document redaction and the secure chat, and you assign an AI quota to each of them. Enterprise adds unlimited users, with volumes and quotas tailored to your teams.
Masking, Blackout and the redaction certificate use no AI credits. Credits are used only by AI tasks, such as a question in the chat.
Detection and redaction run in Europe on infrastructure Redactic controls, without third-party AI reading the unredacted text, and your files are not saved. Your firm is the controller for its documents, and Redactic is the processor under GDPR art. 28, with a DPA signed when you subscribe. Data Processing Agreement Security
Detection and masking in Europe, no files or conversations stored, and a DPA signed when you subscribe.
For payroll bureaus with many users, Enterprise adds unlimited users and dedicated, single-tenant, private-cloud or on-premise deployment.