Document anonymization tools: which one should you choose?
Document anonymization tools are methods, manual or software-based, that find the personal data in a file and then delete, mask or replace them before the file is shared. They fall into five families: manual work in a word processor or PDF reader, PDF redaction tools, online services, enterprise solutions and APIs, and finally installed software that works offline.
No family is best in absolute terms. A legal counsel who redacts one document a month, an HR department that pseudonymizes hundreds of employment contracts, a hospital preparing reports for research and an IT team cleaning application logs have neither the same volumes, nor the same constraints, nor the same budgets. The right choice depends on how sensitive the documents are, how many there are, their formats and what happens to them next.
Five criteria allow an objective comparison:
- confidentiality: does the document leave your computer during processing?
- reversibility: can you restore the original data if needed?
- formats: Word, Excel, native PDF, scanned PDF, CSV;
- cost: time spent, subscription, license or integration project;
- GDPR compliance: processors, data minimisation, security.
We publish Biffer, a tool in the fifth family. This comparison nevertheless tries to describe each approach with its real strengths, because several of them are perfectly suited to certain needs.
The five families of anonymization tools
Each family reflects a different way of sharing the work between the user, the software and, sometimes, an outside provider.
1. Manual work
Find and Replace in Word, then the Inspect Document feature to remove metadata and comments. Adobe Acrobat Pro offers a Redact tool that permanently deletes the selected content. No extra investment if you already own these programs, but a lot of time and a risk of omission in long documents, where every occurrence has to be handled by hand.
2. PDF redaction tools
Software or add-ons specialized in blacking out areas or patterns (emails, numbers) in a PDF. Effective for producing blacked-out documents, they are however limited to PDF and rarely offer reversible aliases.
3. Online services
You upload the file to a website, which processes it on its servers and returns it anonymized. Fast and with nothing to install, they mean the document passes in clear through a third party, which you must assess as a processor.
4. Enterprise solutions and APIs
Platforms and libraries built into information systems, such as Microsoft's open source library Presidio. Suited to large volumes and automated flows, they require a technical project and development skills.
5. Offline software
Installed on the computer, it detects and replaces data locally, with no connection during processing. Biffer belongs to this family. It suits documents covered by professional secrecy and users without a technical team.
Comparing document anonymization tools
The table below sums up where each family stands on four technical criteria; the fifth, GDPR compliance, is covered just after. It describes general trends: each product has its own features, and a service's terms must be checked case by case.
| Family | Confidentiality | Reversibility | Formats | Cost |
|---|---|---|---|---|
| Manual (Word, Acrobat) | Local | No | Those of the software | Time spent |
| PDF redaction | Local or online | No | License | |
| Online service | Provider's server | Varies | Varies | Free to subscription |
| Enterprise, API | Depends on hosting | Configurable | Text, data | Project, on quote |
| Offline software | Local | Yes, with a table | Office files, PDF, scans | License |
Under the GDPR, three points separate the tools. A service that receives your files acts as a processor: article 28 then requires a contract setting out its obligations, and the hosting location matters. Article 32 requires security measures appropriate to the risk, which weighs heavily for health data or legal case files. Finally, reversibility has a legal effect: a pseudonymized document, whose names can be recovered, remains subject to the regulation, whereas a truly anonymous document falls outside it, under recital 26.
Cost should also be assessed over time. A free tool that requires an hour of review per document soon costs more than a license, and an API with no usage fees still involves development and maintenance. Conversely, paying for a powerful tool to process three documents a year makes little sense. So weigh each option against the number of files you actually process each month, and the checking time it leaves to you.
Which tool to choose for your situation
Four typical situations cover most needs.
- An occasional, not very sensitive document. Manual work is enough, provided you really delete the text and clear the metadata. If you already have Acrobat Pro, its Redact tool works well for PDFs.
- Large, automated flows. Enterprise solutions and APIs are built for this: anonymizing databases, logs or entire corpora, integrated into existing processing by a technical team.
- Documents with no particular confidentiality issue. An online service brings speed, once you have read its terms: how long files are kept, where the servers are, the data processing agreement.
- Confidential documents processed regularly. Employment contracts, balance sheets, patient files, tax notices, court documents: offline software avoids any transfer before protection and automates detection.
We designed Biffer for this last situation. It handles Word, Excel, CSV, text, PDF and scans, offers stable aliases and an encrypted mapping table, and recognizes the fields of 18 professions. The free plan covers 5 files per month; unlimited use costs €10 excl. VAT (€12 incl. VAT) per computer, paid once, as detailed on the page pricing. Biffer does not replace a review: you validate each detection before saving. The page offline software explains why local processing simplifies your GDPR analysis, and the page regulations gathers the texts cited.
Try the offline tool on your own documents
Biffer, published by Opcadia and designed by Romain Rissoan, installs on Mac and PC in a few minutes. Test it free on 5 files per month, with every feature, without a single document leaving your computer.
Frequently asked questions
Is there a free tool to anonymize a document?
Yes. Manual work in software you already own costs only time, and several tools offer a limited free version. Biffer is free for 5 files per month, with all its features.
Is an online anonymization service GDPR compliant?
It can be, if a data processing agreement governs the processing and the security measures are appropriate. Check how long files are kept, where the servers are located and whether the provider may use your documents.
Which tool should I choose for medical or legal documents?
For health data or documents covered by professional secrecy, local processing limits the number of parties involved. Offline software such as Biffer, or careful manual work for isolated cases, avoids sending the document anywhere before it is protected.
Your business documents anonymized, ready to be published or handed to an AI tool.
Biffer runs on your computer without sending a single file. Free for five files a month, unlimited for €10 excl. VAT per computer.
100% offline · Free: 5 files a month · No file sent