Privacy by design: How Clarvia automatically redacts sensitive personal data under GDPR

When navigating bereavement or end-of-life administration, people frequently handle documents and questions containing highly sensitive personal data. To protect user confidentiality in full alignment with GDPR principles, Clarvia has implemented a deterministic, privacy-by-design redaction pipeline. Before any automated processing or language model evaluation occurs, our systems automatically identify and strip sensitive identifiers, including email addresses, phone numbers, IBANs, bank account numbers, payment cards, national identity numbers, passport numbers, and medical or insurance policy identifiers. In addition, user IP addresses and sender email addresses are never stored in plain text in our persistent application databases. By anonymising input data at the application boundary, Clarvia ensures that families receive practical, verified guidance without compromising their personal privacy.