GDPR and compliance
Docuflair Redact & Mask helps organisations remove or pseudonymise personal and confidential content before documents are shared — when granting access to files, answering subject access requests or passing documents to external service providers.
Supporting features
Section titled “Supporting features”| Requirement | Product feature |
|---|---|
| Irreversible removal of content | Export in Edited mode: redactions are irreversible, including the text layer; file metadata can be deleted or pseudonymised on export |
| Pseudonymisation with controlled reversal | Docuflair Mask: replacement by pseudonyms, re-identification only inside the system; the original-to-pseudonym mapping can be exported for a documented handover |
| Traceability and integrity | Document history with versions, an integrity check by SHA-256 against the audit-proof chain, tenant history and the system audit log |
| Data minimisation in operation | On-premises operation; document processing requires no internet or cloud access |
| Protection of stored documents | Optional encryption of the document store (master key), encrypted storage of sensitive settings and passwords |
| Access control | Tenant separation, a role-based permission model (RBAC) with graduated download levels (full / PDF only / redacted only / no download) |
| Storage limits and retention | A deletion policy per project (retention periods, for example), a recycle bin, and legal hold to block premature deletion |
| Securing accounts | Password policies (system-wide and per tenant), enforced password changes, rate limiting after failed attempts |
How responsibilities are split
Section titled “How responsibilities are split”Tenant separation is reflected organisationally as well: the system administrator operates the installation but has no direct insight into the tenants’ content; administration inside a tenant (users, rights, dictionaries, projects) rests with the tenant administrator — see tenant versus system administrator.