Skip to content
All audiences

For hr professionals

PDF tools for HR

HR documents are personal data by definition, which makes every upload a transfer worth avoiding. The common jobs — anonymizing CVs for shortlisting, assembling a personnel file, locking a contract before it is emailed — all run in your browser here, so nothing is transferred at all.

By Updated How we write these

What tends to go wrong

  • CVs, contracts, payroll and disciplinary papers are personal data, and uploading them to a free service is a transfer to a processor nobody assessed.
  • Blind shortlisting only works if the identifying details are actually removed, not covered over.
  • Offer letters and contracts get emailed, and email is not a protected channel.
  • Documents forwarded internally carry the author name and editing history of whoever drafted them.

The workflow

Every one of these works today, and runs on your own device.

  1. 1

    Anonymize a stack of CVs for fair shortlisting

    Finds names in contact blocks, email addresses and phone numbers across a batch and blacks them out, so a panel sees experience rather than identity. Read the result before circulating — a name in a referee line or an email signature can still need a manual box.

    Auto-Redact Personal Info
  2. 2

    Remove specifics from a case document

    For a grievance or investigation paper shared with a panel, the identifying passages have to be gone rather than hidden. The characters are removed from the file, so nobody can select the covered area and read what was underneath.

    Redact PDF
  3. 3

    Lock a contract before it is emailed

    AES-256 with a password you share by another channel — a phone call, not the covering email. A mistyped address then delivers something unreadable rather than someone’s salary.

    Password Protect PDF
  4. 4

    Assemble a complete personnel file

    Contract, amendments, appraisals and training records into one document in date order, so a file request is answered with a single document rather than a folder to piece together.

    Merge PDF
  5. 5

    Clear the drafting history before circulating

    A policy document or offer letter carries the author name and the revision timeline in its properties. On anything going outside the team, clear it.

    Remove PDF Metadata
  6. 6

    Make a signed or completed document final

    A returned starter form or signed policy acknowledgement holds its answers in live fields that can still be changed. Flattening writes them into the page so the record is fixed.

    Flatten PDF

Anonymizing a CV without leaving a trail back

Blind recruitment fails quietly. The panel is shown a document that looks anonymized, the identifying text is still selectable underneath, and nobody finds out.

Two habits prevent it. First, redact rather than draw — a filled rectangle over a name leaves the name in the file. Second, check the saved copy the way a curious reader would: select across each black area, paste it somewhere, and search the document for the candidate’s surname.

Then clear the properties. A CV exported from a word processor very often has the candidate’s own name in the author field, which survives every redaction you make on the page because it is not on the page.

The file name is the other giveaway. "J-Smith-CV.pdf" undoes careful redaction before the document is even opened.

Questions

Is uploading a CV to a free PDF site a data protection problem?

It is a transfer of personal data to a third-party processor, which generally needs a lawful basis, an agreement and an assessment. Processing the file in your own browser avoids the question entirely, because no transfer takes place.

How do I check a CV is genuinely anonymized?

Open the saved copy, select across each black area and paste it into a text editor, then search the document for the candidate’s surname. If nothing comes back on either test, the text is gone. Also check the document properties and the file name.

What password protection should a contract have?

AES-256, which is what the encryption tool applies, and a password sent by a different channel from the document. A password written in the covering email protects nothing, because anyone with the email has both.

Can I remove a page from a personnel file and keep the rest intact?

Yes — deleting pages rewrites the document without them and leaves everything else, including bookmarks that point inside the remaining pages, as it was.

More in PDF Security & Privacy Tools, or browse every tool.