Keep the copy. Destroy what you may not keep.

IDBird automatically removes sensitive data from copies of passports and ID cards before they reach your archive: the national identification number, the photo, the signature and the machine-readable zone. Processed exclusively within the EU — and no document is ever stored.

  • Processed exclusively within the EU
  • No document is ever stored
  • Removal is permanent — not a layer that can be lifted
UNION OF UTOPIA IDENTITY CARD
OBJECT_TYPE/PERSON/FACE
Surname
VOGEL
Given names
ANNA MARIA
Date of birth
12 AUG 1974
Nationality
UTO
Document no
D23145890
Signature
OBJECT_TYPE/PERSON/SIGNATURE
I<UTOD231458907<<<<<<<<<<<<<<< 7408122F3108962UTO<<<<<<<<<<<6 VOGEL<<ANNA<MARIA<<<<<<<<<<<<< MRZ_TD1_LINE_1…3
Specimen document — invented data

Specimen document — invented data

WHAT<GETS<DESTROYED<<<<<<<<

Four things your archive is better off without

An ID copy shows that you verified someone — but it usually carries far more personal data than you need to keep. IDBird removes exactly the elements that matter most for data minimisation.

National identification number

The BSN, NIR, DNI and their counterparts — the one number most organisations have no reason to keep on file. Recognised specifically for 15 EU countries.

Machine-readable zone (MRZ)

The lines of code at the bottom of a passport or ID card. They pack the name, document number, birth date and national ID into one machine-readable string.

Portrait photo

Removed by default. If your process needs a recognisable face, you can choose to keep it — per document.

Signature

A handwritten signature is personal data that an archived copy rarely needs. It is found and removed along with the rest.

WHO<IT<IS<FOR<<<<<<<<

For everyone who must check IDs — and must not keep them

Real estate & rental agents

Tenant screening means looking at an ID — not keeping every detail of it. In many countries the national number may not be retained at all (in the Netherlands: UAVG article 46). Keep a copy that shows you did your check, without the data you don't need.

Notaries & legal professionals

Client files keep their evidential value with a redacted copy: the document stays recognisable, while personal data you have no reason to retain is permanently removed — not hidden under a layer.

Property managers & platforms

Automate intake: every uploaded ID copy passes through IDBird before it touches your storage. A multi-page PDF counts as a single call, and rejected documents are never billed.

HOW<IT<WORKS<<<<<<<<

One document in, one clean copy out

  1. 01

    Send the document

    Your application sends the copy of the passport or ID card — as an image or PDF — over a secure connection.

  2. 02

    Sensitive data is detected and removed

    IDBird finds the national identification number, the machine-readable zone, the photo and the signature, and removes them permanently from the image.

  3. 03

    Receive the redacted copy

    You get the cleaned copy back within seconds, ready to archive — together with a summary of what was found and removed.

Developers: read the full API reference

THE<HONEST<CONTRACT<<<<<<<<

IDBird tells you when a document needs a second look

Most redaction tools return an image and wish you luck. IDBird grades its own work: every response says how complete the redaction is, so your application knows when a copy can be archived automatically — and when it may need manual review.

Every possible situation is documented, in a fixed order your code can rely on.

See all warning codes in the API reference →

SEVEN<PRIVACY<INVARIANTS<<<<<<<<

Guarantees, not settings

These are not configuration options that a future release might flip. They are invariants: the service is built so that violating one is a failing test, not a support ticket.

  1. I1

    No uploaded image byte is ever persisted — no database, no cache, no queue, no log, no leftover file.

  2. I2

    Every temporary file is destroyed before the response is sent, even when the request fails.

  3. I3

    No detected value ever reaches a log or audit record — types and counts only, never the number itself.

  4. I4

    Every gap in coverage is named in the response warnings. Silence is never assumed to be safety.

  5. I5

    Redaction is pixel-destructive. There is no overlay or layer that could be removed afterwards.

  6. I6

    If the redaction backend fails, you get an error — never an unredacted image.

  7. I7

    Processing happens exclusively within the EU — without exception.

EU<ONLY<BY<CONSTRUCTION<<<<<<<<

Built for the strictest reading of the GDPR

Documents are processed exclusively within the EU — at rest, in use and in transit. Processing outside the EU is technically impossible for the service, not just contractually promised.

This website practises what the API preaches: no cookies, no analytics, no third-party requests. All fonts are self-hosted.

COUNTRY<COVERAGE<<<<<<<<

27 EU countries, honestly graded

Fifteen countries get detection of the national identification number on top of MRZ, photo and signature. Twelve more are covered for MRZ, photo and signature — and the response says so.

National number + MRZ + photo + signature

  • NL Netherlands
  • DE Germany
  • FR France
  • ES Spain
  • AT Austria
  • BE Belgium
  • HR Croatia
  • CZ Czechia
  • DK Denmark
  • FI Finland
  • IE Ireland
  • IT Italy
  • PL Poland
  • PT Portugal
  • SE Sweden

MRZ + photo + signature

  • BG Bulgaria
  • CY Cyprus
  • EE Estonia
  • GR Greece
  • HU Hungary
  • LV Latvia
  • LT Lithuania
  • LU Luxembourg
  • MT Malta
  • RO Romania
  • SK Slovakia
  • SI Slovenia

Documents from any other issuing country are declined outright — never silently half-redacted.

QUESTIONS<<<<<<<<

Frequently asked questions

Does IDBird store the documents I send?

No. No document database exists: uploads live only for the duration of the request, and every temporary file is destroyed before the response is sent. Records keep counts of what was found — never an image, never a number.

Is the redaction reversible?

No. The removed content is painted out of the image pixels themselves. There is no overlay, annotation or hidden layer that could be peeled off afterwards.

Where are the documents processed?

Exclusively within the EU — at rest, in use and in transit. Processing outside the EU is technically impossible for the service, not just a contractual promise.

Which files are accepted?

JPEG, PNG, BMP and PDF, up to 10 MiB. PDFs are accepted up to 5 pages by default and count as a single call. The file type is detected from the content of the file itself.

Can I keep the portrait photo?

Yes. You can choose per document to keep the photo, or to receive two versions: one fully redacted and one with the photo intact. When a face stays visible, the response says so explicitly.

What happens with documents from outside the EU?

They are declined. IDBird covers 27 EU countries — 15 with detection of the national identification number, 12 with MRZ, photo and signature coverage — and declines what it cannot do reliably.

Am I allowed to copy an ID document at all?

That depends on your national law and your legal basis — in many EU countries you may verify identity but not retain the national identification number (in the Netherlands: UAVG article 46). IDBird supports data minimisation: it removes the most sensitive elements, so your archive holds as little unnecessary personal data as possible. For your specific situation, consult your legal counsel.

How do I get an API key?

Mail info@idbird.eu — you receive your key personally from the IDBird team, with a free allowance of 50 documents per day to start. Keys are stored as a hash only and can be revoked with immediate effect.

Redact your first document today

Get a free API key by mail and send your first document within minutes — 50 documents a day included from day one.