Directory-assisted Redaction

Redaction that's defensible, not automatic

We combine patterns, directory context, and human review to redact accurately — especially where safeguarding, third-party data, and “voice of the child” are involved.

This is not a “press a button and trust the machine” service. It's a workflow designed to support careful decisions — faster — while keeping a clear record of what was changed and why.

How it works

Four layers, one defensible output

Designed to reduce manual effort while keeping decisions consistent and clearly recorded.

Directory context (via Wonde)

We use Wonde to bring in the relevant pupil and staff directory data so redaction can be consistent and reliable.

Patterns establish a baseline

Patterns generate likely matches and common variations and can apply rule-based removals — such as staff names and email addresses where appropriate.

AI assists where it helps

AI helps identify and classify content patterns, but it's not the whole solution — especially in education where context matters.

Human review is the main control

Safeguarding nuance, third-party permissions, and “voice of the child” require careful judgement.

Our redaction split

60% human, deliberately

The goal is not mechanical redaction — it's defensible redaction.

Human review~60%
Patterns / rule-based~20%
AI assistance~20%

Rule of thumb — varies by case complexity.

Education-first

Sensitive content handled with care

We look for the content that needs extra caution, then apply consistent rules and human judgement so outputs stay compliant and appropriate for schools.

Safeguarding indicators

"Voice of the child" content

Third-party data where permission or lawful basis is unclear

Where we don't have permission to disclose third-party data, it's removed.

Outputs

What you receive

A complete, reviewable pack — plus a simple manifest so you can evidence what was included (and why).

GDPR evidence pack

A structured pack ready to review, share with the requestor, and file as your evidence.

Manifest / record of inclusion

A simple record of what was included (and why).

Records + retention

Deleted after download

We keep what you need for compliance, and delete detailed contents after download.

DPO Service customers

A ROPA record is created. Once the pack is downloaded, the ROPA record remains and detailed evidence contents are deleted.

Non-DPO customers

Secure download pack; data deleted once downloaded.

Pricing

Paid using TruCredits

Typically credits per document. If something is complex, we confirm the credit cost before proceeding.

FAQ

Redaction questions

What is directory-assisted redaction?

Using pupil and staff directory data to make redaction consistent (e.g., initials/pseudonyms) and reduce manual name-hunting.

Is this fully automatic redaction?

No. Patterns and AI support the work, but human review is the main control.

How much is AI doing?

As a rule of thumb: ~20% AI, ~20% patterns, ~60% human review.

How do you handle safeguarding content?

Safeguarding and “voice of the child” content is handled with extra care and human judgement.

What happens to third‑party data?

Third-party data is removed where permission or lawful basis is unclear.

Do you remove staff names and email addresses?

Where appropriate, yes—patterns can apply rule-based removals.

Do you keep the directory data?

No. Directory context is used to perform the task and is not retained beyond what’s necessary to complete the workflow.

What do we receive at the end?

A secure redacted pack and a defensible record of decisions.

How is this priced?

Typically credits per document. Complex cases are confirmed up front.

What happens after we download the pack?

Data is deleted after download; DPO customers retain the ROPA record of the outcome.