GDPR redaction · Pilot programme
Share documents without exposing data.
lumen.mask detects personal data in your documents, routes every finding through review and exports redacted PDFs with a redaction log — full, pseudonymised or partial. Currently in the pilot programme.
Facts, not buzzwords
Redaction with a system
- 3
- Redaction modes: full, pseudonymised, partial
- Art. 9
- GDPR special categories are always fully redacted
- 2
- Independent approvals in four-eyes mode — with separation of duties
- 1
- Redaction log per export — including audit mapping for pseudonyms
Redaction modes
Redact as strongly as the purpose requires
Not every document needs the same protection. lumen.mask offers three modes — selectable per job, per category and even per finding, with the more specific level winning. For special categories under Art. 9 GDPR, the strictest level is fixed.
- Full: black bar — removed from content, not recoverable
- Pseudonymised: consistent placeholders like [NAME-1], stable across the document
- Partial: configurable visible characters, e.g. the last digits of an IBAN
- Art. 9 (health, religion, ethnicity, biometrics): always fully redacted
Four-eyes approval
No export without approval — no approval without review
Before a redacted document leaves the building, it passes an approval workflow: single-step approval for everyday cases, the four-eyes principle for sensitive ones — enforced automatically for strictly confidential documents and Art. 9 findings.
- Approval locked while red PII findings remain unprocessed
- Separation of duties: creator and reviewing reviewer cannot approve themselves
- Admin override only with a written reason — logged in the audit trail
- Rejection requires a comment — rework stays traceable
Capabilities
From upload to reviewed export
Six building blocks that together form a verifiable redaction process — currently piloted with selected companies.
Sensitive-data detection
Identifies names, addresses, dates of birth, IBANs and similar personal information in documents.
Redaction in PDF, Word and images
Hits are redacted — not just visually, but actually removed from the document content.
Redaction log per export
Log page with mode, findings and — for pseudonymisation — the audit mapping.
Audit trail per document
Which spots were detected, which were redacted, who approved them — traceable documentation.
Need-to-know roles
Submitter, reviewer, approver, auditor — each role sees and does only what it needs.
Compliance-ready
Hosting in Germany, tenant separation, processing per Art. 28 GDPR.
Common questions
What privacy owners ask us
Is the redaction truly irreversible?
In “full” mode, yes: the finding is removed from the content and cannot be recovered from the export. Pseudonymised and partial redactions are deliberately reversible — for internal analysis, for instance — and documented in the redaction log.What about health data and other Art. 9 categories?
For special categories under Art. 9 GDPR — health, religion, ethnicity, biometrics — partial redaction is locked; they are always fully redacted. Such findings additionally enforce the four-eyes principle at approval.How do you prevent findings from slipping through?
Red findings — personal data detected with high confidence — technically block approval until they are reviewed: accepted, rejected or adjusted. Only then can the document be approved; for sensitive documents, only by two independent people.Can the creator approve their own document?
In four-eyes mode, no — separation of duties: neither the creator nor the reviewing reviewer may approve themselves. Administrators can override in exceptional cases, but only with a written reason that is logged in the audit trail.How do I get access to lumen.mask?
lumen.mask currently runs as a pilot programme with selected companies. Request access via the contact form — we will get back to you with next steps and current conditions.
PILOT PROGRAMME
Request pilot access
lumen.mask currently runs as a pilot with selected companies. If you regularly need to redact documents, let's talk about pilot access.