Redactic finds the names, National Insurance numbers, NHS numbers, UTRs, sort codes, account numbers and addresses in your documents, redacts them permanently from the copy you share, and replaces them with placeholders when you work with AI, so your team gets the speed of AI on client and staff files without handing personal data to a model.
Disclosure bundles and subject access responses, payslips and P60s, bank statements, referencing and tenancy files, HR records and scanned correspondence, in PDF, Word, Excel or as images.
Redactic recognises the identifiers that fill British files and checks them against the official rules, so a valid National Insurance number is caught in any of its usual forms and an NHS number is confirmed by its check digit, while a reference number that only looks like one is left alone. Your team reviews a list of findings instead of reading every page for numbers, which is the slow part of redacting a PDF by hand.
Prepare a disclosure bundle or a subject access response with other people's names, National Insurance numbers and account details removed, and ask AI to summarise or draft from a client file while the model receives placeholders in place of the personal data Redactic detects. Every name on your party list is masked wherever it appears, the surname on its own included.
More for law firmsPayslips, P60s, payroll exports and staff files carry National Insurance numbers, UTRs, sort codes and account numbers on almost every page. Redactic finds them in PDFs and scans, so you can redact and anonymise payslips and staff files before they go to a bureau, an auditor or an AI assistant, and in a spreadsheet you can mask a whole column of names or numbers with certainty.
Referencing files, tenancy applications and ID packs are full of bank statements, sort codes, account numbers, driving licence numbers and postcodes. Redactic removes them from the copy you forward, so you can share what a landlord, lender or partner needs to see and nothing more.
More for real estateBelow is a fictitious letter of the kind a firm sends with settlement payment instructions. Redactic recognises the National Insurance number, the NHS number and the UTR by their official rules, takes the sort code and the account number from their labels, and leaves the amount and the terms untouched.
| Field in the document | Type of data | How Redactic handles it |
|---|---|---|
| Olivia Bennett, Brightwell Facilities Ltd | Person and company names | Recognised; with the party list, certain in every form, surname alone included |
| QQ123456C | National Insurance number | Recognised and checked against HMRC prefix and suffix rules |
| 943 476 5919 | NHS number | Recognised, check digit verified |
| 1955839661 | Unique Taxpayer Reference | Recognised from its label, check digit verified |
| 12-34-56 | Sort code | Recognised from its label |
| 12345678 | Bank account number | Recognised from its label |
| 14 Larkspur Road, Didsbury, Manchester M20 6RT | Street address with postcode | Recognised as one address |
| [email protected], 0161 496 0321 | E-mail and phone | Recognised |
| 2401234/2026 | Case number | Masked with one click, or added to your list |
| £18,500.00 | Amount | Kept |
Fictitious data. The amounts, the dates you need and the structure of the letter stay as they are.
| Identifier | What Redactic checks |
|---|---|
| National Insurance number | The prefix and suffix letters are checked against the rules HMRC publishes, with or without spaces. The number has no check digit, so a number that follows the rules is recognised, and one that does not is left alone. |
| NHS number | Ten digits with the modulus 11 check digit verified, found after an NHS label or in its usual 3-3-4 grouping. |
| Unique Taxpayer Reference (UTR) | Ten digits with the check digit verified, taken after a UTR label because ten digits alone are far too common. |
| Sort code and account number | Recognised after their labels, and an account number that follows a sort code is taken with it. They carry no public check digit. |
| Driving licence number | The 16-character DVLA layout, with the month and the day inside it checked. The final check letters are not computed. |
| Postcodes and addresses | Postcodes of real postcode areas, a house number with its street, flats, and street, town and postcode read as one address, and PO boxes. |
| Phone numbers, e-mail addresses, IBANs and payment cards | UK and international phone numbers, e-mail addresses, IBANs by check digit and cards by issuer range and check digit. |
Choose the United Kingdom as the country of your documents once, or leave it on Auto, where Redactic reads the postcodes, the pound amounts and the labels to tell a British document from an American one.
UK data protection law asks you to keep personal data secure, to use no more of it than you need and to take care over other people's information when you disclose a document. Next to each point is what Redactic does, so you can make your own assessment and show it to a client or a data protection officer who asks.
Controllers and processors must put in place technical and organisational measures that are appropriate to the risk, and they are expected to know who handles the data on their behalf. Redactic removes personal data from the documents you share, and the text under every redaction is deleted from the file rather than covered.
Personal data must be adequate, relevant and limited to what is necessary. Sharing a redacted copy of a document, or letting an AI model work on placeholders, keeps the personal data that nobody needs out of the next pair of hands.
The ICO explains how to deal with information about other people when you respond to a subject access request, and redacting a document is one of the ways to do it. Redactic finds that information and removes it from the copy you send, and the decision on what to withhold stays with you.
Redactic is built and hosted in the European Union. Your documents are processed on infrastructure Redactic controls in Finland and deleted when each job ends, so no copy of your client's file stays with us to be breached, reused or used to train a model.
Redactic describes what its tools do; the assessment of your own obligations remains yours.
Many redaction platforms built for legal and public-sector teams sell annual per-seat licences or quote only after a sales call. Redactic shows its price, bills monthly in pounds, and lets you start the same day.
Masking and permanent redaction never consume AI credits; credits are used only when you ask the AI a question.
Both. Solicitors and legal departments use it for disclosure bundles, settlements and AI on client files, and HR, payroll, lettings and accountancy teams use it for the same reason: documents full of National Insurance numbers and bank details that have to be shared or analysed safely.
Yes. Redactic finds the names, identifiers and contact details of other people in a document and removes them from the copy you send, so you can disclose what the requester is entitled to without handing over someone else's personal data. You review the findings and decide what is removed, and what a response must contain remains your decision.
National Insurance numbers checked against HMRC's prefix and suffix rules, NHS numbers and Unique Taxpayer References with their check digits, sort codes and bank account numbers when labelled, driving licence numbers by their DVLA layout, UK postcodes and addresses, phone numbers, e-mail addresses, IBANs and payment card numbers. Names are recognised by the model, and the names on your party list are masked with certainty.
Upload the PDF or a scan, review the findings and export. The text under each black box is deleted from the exported PDF, not hidden behind it, and scans are read with OCR first, so a redaction cannot be undone or copied from under the box.
What matters is what the model receives. With Redactic the document and your questions are masked before any AI step, so the model works on placeholders and the real names return only on your screen.
On infrastructure Redactic controls in Finland, in the European Union. Documents are held only in encrypted memory while the job runs and deleted when it ends, and no third-party AI reads the unredacted text during detection and redaction.
Yes. A data processing agreement is accepted when you subscribe, and we answer security questionnaires on request with the controls described on this page.
Yes. Solo is £19 a month and Firm is £49 a month, billed monthly in pounds sterling, and Enterprise is priced to your volume.
UK identifiers recognised and checked, permanent redaction, and no copy of your files kept.