Keep the subject.
Redact [everyone else]redacted, everyone else

Veil never edits your document. There is nothing underneath.

Drawing a black box over a name hides it from a reader. It does not remove it from the file. The text stays under the rectangle, a PDF keeps its earlier versions, a Word file keeps its tracked changes, a spreadsheet keeps its hidden columns, and an email carries a second copy of itself that your tool never showed you. These are not bugs. They are how the formats are specified to work.

A rectangle is a drawing. Ask the file what it says.

$ pdftotext redacted-in-place.pdf -

[ press extract ]

The file has five black rectangles drawn
over five names. Nothing has been removed
from the content stream.

$ pdftotext generated-by-veil.pdf -

[ press extract ]

A new document, generated from what Veil
decided to release. The redacted names were
never written into it.

GDPR Article 15(3) entitles the requester to a copy of their personal data, not to the original artifact. Supervisory authority guidance accepts extracts.

Built for the difficult part of an access request.

Most DSAR software manages the request: intake, identity checks, the deadline clock, who is doing what. Veil does none of that and does not ask you to stop using whatever already does it. It does the part that eats the week, the disclosure review, where the requester's information sits in the same paragraph as their colleagues', their customers' and a witness's.

Work out the deadline on the Desk

The things a privacy team asks first.

One decision. Every document.

The reason a large request takes a week is not that the decisions are hard. It is that the same manager appears in forty seven places across twelve documents, and each one is a separate decision made late in the afternoon. Veil resolves every mention of a person, across every file in the case, into a single row. You decide once. It applies everywhere that person appears, including the documents you have not opened.

When Veil is not sure, it redacts.

No system reads every document perfectly, and we will not ask you to take an accuracy figure on faith. What protects you is which way the system errs when it is uncertain. Veil errs in one direction only.

1. 01

   Uncertainty redacts

   Anyone who cannot be attributed to the data subject is redacted, then raised for a person to decide. Nothing goes from unknown to disclosed without a named person confirming it, and the confirmation is written to the audit log.

2. 02

   Identifiers are matched, not judged

   National identifiers, bank details, contact details and dates of birth are recognised by rule. Nothing the automation infers afterwards can take one back out of the redaction set.

3. 03

   A separate check has the last word

   Every generated document is re-read by a component built and run separately from the one that redacted it. Anything it cannot clear is withheld and the case stops, loudly, until a person looks.

European by construction, not by preference.

The parts of this product that touch personal data were designed on the assumption that they will one day be audited.

• Residency

  Every component that touches a document runs inside the European Union, pinned rather than defaulted.

• Keys

  Each case is encrypted under its own key. Purging a case destroys the key, so what was encrypted under it is unreadable everywhere, including in backups. The rest of the case is deleted, and survives only in a backup until that backup expires.

• Retention

  Cases purge on a schedule you set. Logs never contain personal data. Storage cannot be browsed.

• Record

  Every decision, download authorisation and settings change is written to an audit record that cannot be edited.

• Security overview
• Sub-processors
• Trust centre

Priced on pages redacted. Nothing else.

No per-seat charge on a team that answers four requests a year, and no annual contract to sign before you can try it on a real case.

Every plan carries the full detection capability, independent verification on every document, and the bundle, manifest and quality report. There is no reduced tier.

Full pricing and limits