Biffer features: an offline document anonymizer

The four main features: detect, mask, map, unredact

Under the GDPR, a redacted document whose table you keep is pseudonymized: the table is the additional information kept separately described in Article 4(5) of the regulation. Our regulations page explains the difference with anonymization.

Download Biffer

One file or hundreds: single and batch processing

Biffer adapts to your volume. A single document is processed in the viewer, with a mask-by-mask review. A series of similar documents is processed in one operation, with the same settings. Both modes produce the same files: the redacted document in its original format, the mapping table and the configuration.

A .biffer configuration is a readable file: document type and subtype, disabled data types, masked date parts, drawn areas, values added by hand, ignored and excluded values. Opened on another document, it applies the same settings and flags areas that fall outside the pages and values it cannot find. For a series of uniform documents, review comes down to a visual check.

Download Biffer

The viewer, redaction and export

The viewer

The document is displayed page by page, with a column of thumbnails, zoom and fit to width. PDFs and images are rendered as they would print; Word, Excel, CSV and text files are shown as a text preview. Each detected item carries a mask colored by type, with a tooltip giving the type, the value and the number of occurrences. The side panel has six sections: Document (type and subtype), Zones, Detection (one switch and one color per data type), Fields (values grouped by type, with "all", "none" or "without doubtful ones"), Result and Files. After redaction, the Original, Redacted and Unredacted switch compares the versions, and an overlay shows which alias replaces which value.

Automatic and manual redaction

Automatic redaction applies the policy of the recognized document type: a balance sheet keeps its fiscal year dates and amounts, an employment contract loses the employee's identity, a standardized borrower insurance information sheet loses the name, date of birth, address, application number and contract number. Manual redaction completes the detection: select some text or draw a frame on the page, then choose "Mask this data" and its type (Person, Organization, Number, Date, Other data or a new field labeled your way). All occurrences of the value are masked together. The Zone tool, or holding Shift while dragging, blacks out a frame as is: a signature, a stamp, a logo.

Redaction options

Several settings control what is redacted and how, before you click Redact:

• the document type and subtype, which set the default policy, and one switch per data type;
• the parts of dates that are masked (day, month, year), separately for dates of birth and for other dates: "DD/MM/1983" keeps the year;
• "Always mask this value in my next documents" and, conversely, "Never mask this value again" for a harmless word;
• the mapping table encrypted with a password, in plain text, or no table at all;
• black highlighting of redacted data in Word and PDF, and clearing of metadata.

Export and export options

Redaction produces the document inside Biffer; nothing is written next to the original until you export. Export saves the redacted document, in its original format, wherever you choose. The export window offers three options: anonymize the file name ("Contract Jean Dupont 2024.pdf" becomes "Contract PERSONNE_001 2024-biffe.pdf"), export the .biffer configuration and export the .anonmap table. The last two are checked by default, and Settings lets you change this, which also applies to the right-click menu. An existing file is replaced after confirmation. "Export all" shows the same options once for all open documents and asks for a single replacement confirmation.

Download Biffer

Supported files: formats, document types, fields and professions

File extensions

Biffer reads 16 extensions and produces a file of the same type as the original: a workbook stays a workbook, a Word contract stays a Word contract, a text PDF is rewritten in place with its layout. A PDF in which most pages contain fewer than 80 characters of text is treated as a scan, with a "page x of y" bar and a Cancel button. PDFs are covered in detail on the page redact a PDF.

Document types and subtypes

Biffer recognizes the type and subtype of a document from its text and file name, and suggests the matching redaction policy, with its rationale. You can change the choice in the Document section; if a type is missing, the link "My document type is not in the list" sends us your request (the document itself is never sent).

Detected fields

Detection combines data recognized by its shape, whatever the context, and fields recognized by the keyword that precedes them. All known fields are searched in every document, whatever your profession: a tax notice or an employment contract is covered even if you are an architect. You can declare your own fields in Settings, with a label and the keyword that precedes the value.

Identifiers by country: Europe and the United Kingdom

Beyond French identifiers, Biffer recognizes 128 personal and company identifiers from 30 other European countries: national, tax, social security and health insurance numbers, company registers and VAT numbers. Each one is checked against its official check digit when there is one, or requires the keyword that introduces it ("National Insurance", "Steuer-ID", "DNI"...), so that an amount or a French company number is never taken for a foreign identifier. Phone numbers, postal addresses, license plates, titles and first names from these countries are recognized too. Aliases follow the language chosen in Settings: PERSON_001 in English, PERSONNE_001 in French.

Supported professions

The profession chosen in Settings puts its fields at the top of the Fields section, with their labels. Each profession has a page detailing typical documents and the precautions specific to that profession. Most of these identifiers are French; the table keeps their French names.

Download Biffer

Quick redaction from the right-click menu and opening with Biffer

Redact a file with a right-click

The "Biffer" right-click item processes a file without opening the software window. On Windows, the item appears in the File Explorer context menu, added by the installer for your account. On Mac, Biffer installs a Quick Action shown in the Finder context menu, under Quick Actions or Services; if it does not appear, the context menu card in Settings reinstalls it and opens the right System Settings panel directly. Redaction applies your profile settings (profession, highlighting, exports): the file "Contract.pdf" produces "Contract-biffe.pdf" next to the original, with its table and configuration according to your export settings, then a notification confirms the result ("Contract.pdf redacted: 12 items masked"). The license and monthly quota are checked just as in the window.

Open a file with Biffer

Biffer registers with the system for every format it reads: PDF, images, Word, Excel, CSV, text, as well as its own .biffer and .anonmap files. The "Open with" command in the Finder or File Explorer therefore offers Biffer, without making it the default application for your PDFs. If Biffer is already open, the file opens in the existing window, in a new tab. An .anonmap table opens Unredact directly; a .biffer configuration is applied to the displayed document. The Open button and drag and drop also accept several files at once. To get started, download Biffer: the free plan gives access to all these features for 5 files per month, and the unlimited license costs €10 excl. VAT (€12 incl. VAT) per computer, paid once.

Download Biffer