Anonymization and redaction software for the public sectorRedact your administrative documents before disclosing them, on your computer.
Access request, council decision, report, citizen letter in Word, PDF or scan: names, addresses, contact details and identifiers are truly redacted, not covered, before going to the requester or to an AI. Your originals and the real names never leave your computer.
The “Get notified at launch” button opens your e-mail app. Otherwise, write to contact@anonymfiles.com.
From €290 excl. VAT per year for one seat; a department of 8 staff: €1,920 excl. VAT per year. See pricing →
Coming soon for Apple silicon Macs (app signed and notarized by Apple) and Windows 10/11. No account, no telemetry, no online license check. On a Mac, turn off Wi-Fi right after installing: nothing changes.
Courrier d'usager
Réclamation de M. Karim BenaliPERSONNE 1, domicilié 8 allée des Tilleuls, RennesADRESSE 1.
Contact : k.benali@exemple.frEMAIL 1.
Masked in this document
Fictional example.
What your profession requires
Disclose the document, yes. Other people's privacy, no.
In France, an administrative document is disclosed after the protected passages are blanked out. A black box on a PDF removes nothing: AnonymFiles actually deletes the text, on your computer.
Partial disclosure
When a document contains non-disclosable passages that can be blanked out or separated, it is disclosed after they are removed (Code of relations between the public and the administration, art. L. 311-7).
Privacy
Passages that would harm privacy can only be disclosed to the person concerned (CRPA, art. L. 311-6).
GDPR
Personal data of citizens and staff remains subject to the GDPR, including when staff use generative AI: minimize before sending (art. 5.1.c).
Sources: CRPA, art. L. 311-6 and L. 311-7 · GDPR, art. 5.
Use cases
What you can give the AI, and what to mask first.
Answer an access request
Prepare the disclosable copy of a file within a month.
Mask first: third parties, their addresses and contact details, protected passages specific to the document.
Summarize a citizen's file
Build a chronology before answering.
Mask first: the citizen, relatives, contact details and identifiers.
Prepare a decision or a report
Rephrase, structure, check consistency.
Mask first: people mentioned, addresses and amounts that identify them.
How does it work in your department?
From the requested document to the redacted copy.
Drop in the file
Decisions, reports, letters, e-mails, scans, subfolders included. The same person keeps the same label in every document.
Review
Original and copy side by side. One click masks a missed name, an amount or a passage. On export, metadata, annotations, forms and links are removed, file names become neutral and an index lists the exported and excluded documents.
Work with the AI
Give the copy to the AI of your choice (ChatGPT, Claude, Le Chat, Copilot…) so it can help you summarize a file or prepare an answer to a citizen, before sending the requester the « Pour envoyer à quelqu'un » copy. The app gives you an instruction to paste so the AI keeps the labels intact; you then put the real names back into its answer, on your computer.
Step by step: anonymizing a document before ChatGPT · answering a CADA request · pseudonymization or redaction · why a black box is not enough · the processing register and AI.
Which documents?
What you can anonymize today.
- Council decisions, orders, reportsWord or text PDF
- Citizen letters and complaintsWord, text PDF or .txt
- Scanned documents, handwritten formsPDF or image, read by local OCR
- E-mails, with their attachments.eml or .msg
- Tables, lists, registers.xlsx, .xls or .csv, one table per sheet
Text or scanned PDF, 50 MB maximum per file (10 MB for text and spreadsheets); a scan is read by local OCR. The copy of a Word file is a .docx that keeps its layout, with a text file for the AI; the copy of a spreadsheet is a redacted workbook (.xlsx or .csv, values without formulas), with a text copy; the copy of a presentation or an e-mail is a text file.
Which approach?
Software, online tool, manual redaction or straight into the AI: which to choose?
Four ways to prepare a case file before AI. Only one processes the whole file without anything leaving your computer, then puts the real names back into the answer.
| Approach | Where the document goes | Whole case file | Scans and Word | Real names put back | Time for a 30-document file |
|---|---|---|---|---|---|
| AnonymFiles | Nowhere: everything happens on your computer | Yes, same labels across every document | Yes: local OCR, Word and PDF redacted in place | Yes, as text, Word or PDF | A few minutes of processing, then your review |
| Online anonymization service | To the provider, before being anonymized | Often in batches or with quotas | Depends on the service | Depends on the service | Upload, processing, download |
| Manual redaction (Acrobat, Word) | Nowhere | No: file by file | PDF in Acrobat; in Word, text must be deleted, not highlighted | No | Slow: every name, in every document, by hand |
| Pasting the document into the AI | To the AI provider, names included | Not applicable | Yes | Not applicable | Instant, but the names are already gone |
The detail, software by software: our anonymization software comparison.
How much for a local authority?
A price per seat, not per page.
For working alone or as a pair. Entire folders, batch processing, real names put back. E-mail support within 2 business days.
Get notified at launchEverything in Pro, plus priority support within 1 day. Example: a department of 8 staff, €1,920 excl. VAT per year.
Get a quoteNo limit on seats: a conversation to understand your organization, a quote, then a supported roll-out and a dedicated contact.
Write to us- No online license check, ever.
- No account, no telemetry.
- Updates included for as long as your subscription runs.
A question about the plans? Write to contact@anonymfiles.com.
Frequently asked questions
Questions from local authorities and administrations.
What software can redact an administrative document?
AnonymFiles, a local anonymizer installed on the staff member's computer. It stands out on three points: it processes the whole case file with the same labels across every document, it redacts Word and PDF files inside the document itself, layout preserved, and it puts the real names back into the AI's answer. Everything happens on your computer, with no account and no network call for the license. The « Pour envoyer à quelqu'un » export produces redacted PDF and Word files, with an optional watermark. €290 excl. VAT per seat per year, €240 excl. VAT per seat from 3 seats, no page quota. Our anonymization software comparison.
Is the redacted text really deleted?
Yes: in a PDF, each masked area becomes a black box and the text underneath is removed from the file, not just covered; metadata, annotations and attachments are removed. Each copy is reread in full before export, and a value that survives makes the document rejected.
What do I give the requester?
The « Pour envoyer à quelqu'un » export produces redacted PDF and Word files, where each blanked-out passage is a black box showing its category ([PERSONNE_1]…), with no AI instructions, and an optional watermark.
What about publishing online?
Publication follows stricter rules than disclosure to a requester: personal data must in principle be anonymized. Review the copy with that in mind, and consult your data protection officer.
Can an anonymized copy still identify someone?
Yes, if an indirect detail remains visible: a parcel number, a building site address, a unique job in the authority, an incident date. That's why each document is reviewed side by side before export, and one click masks whatever detection missed.
General questions (pseudonymization, which AI to use, scans, checking the network, compatible computers): the How it works FAQ.
Coming soon
The next document you disclose can keep other people's privacy with you.
Coming soon for Apple silicon Macs and Windows 10/11. No account, no telemetry. The button opens your e-mail app; otherwise, write to contact@anonymfiles.com.