Personal Data Redaction

Every voyage generates thousands of pages of sensitive data. Most of it moves through email. Regulators are watching, fines are rising, and the rules are only getting harder to navigate.

Shipping runs on email.
Sensitive data runs with it.

Every voyage generates an estimated 3,575 document pages. Around 1,625 of them contain sensitive personal data: passport scans, crew medical records, visa applications, payroll details, port call documentation.

They all flow through operational email, shared across teams, agents, port authorities, and counterparties with little to no systematic control. Across transport and energy alone, regulators in 20 countries have issued 136 fines totalling €195 million — an average of €1.2 million per incident. One mishandled passport scan is enough to trigger an investigation.

Compliance by default, inside the inbox you already use.

Personal Data Redaction is built into Sedna Email. It automatically detects sensitive personal data in messages and attachments as they are sent and received, classifies it by risk, and redacts it on a configurable schedule without changing how teams work or adding tools to the stack.  

Teams stay compliant without changing how they work.

See it in action →

Key Benefits

Detect personal data before it becomes a risk

AI-assisted detection scans emails and attachments across 400+ file types, including scanned images and PDFs via OCR. It identifies 30+ types of personal data, from passport numbers to medical records, on every message sent and received.

Redact on your terms

A configurable redaction interval gives teams a clear window to act before sensitive content is automatically removed. Authorised users can review, restore, or download originals. Everyone else sees the redacted version.

Keep operations moving, not second-guessing

Crewing, HR, and port operations teams don’t need to change a thing. Controls run in the background so your people stay focused on what matters — not manually hunting down passport scans.

Enterprise-grade controls, without the overhead

Role-based permissions, mailbox-level configuration, and self-hosted detection — all within Sedna’s ISO 27001 and ISO 27701 certified infrastructure. No new sub-processors. No heavy compliance programme to get started.

Turn compliance into your competitive advantage

Customers and counterparties increasingly demand evidence of data protection controls. Personal Data Redaction gives you the governance to answer those questions — and win the business that less prepared operators will lose

Your inbox is a Personal Data timebomb.

Every week, hundreds of emails containing personal data pass through your business unmanaged. The fines are real. The risk is growing. The Risk Exposure Calculator helps you assess the estimated exposure across your fleet based on voyage volume and revenue.

Risk Exposure Calculator

→

FAQ

You have questions? 
We have answers.

What types of personal data does it detect?

Personal Data Redaction identifies 30+ types of personal data, including passport numbers and scans, national IDs, crew medical information, financial details such as IBANs, home addresses, and visa references. Enterprise customers can configure custom detectors to identify organisation-specific formats (for example, employee ID structures or internal reference formats).

Does it scan historical emails?

No. Personal Data Redaction scans emails and attachments as they are sent and received from the point the module is enabled. It does not retroactively scan or redact historical messages.

What happens when personal data is redacted?

The original message is replaced with a redacted version for all users. Sensitive content in message bodies is redacted inline, and attachments containing personal data are removed. Authorised users with the relevant permissions can download or restore the original where needed. Redaction is not permanent deletion — the original is still stored securely within Sedna’s ISO-certified infrastructure.

Does it work with shared team inboxes?

Yes. Personal Data Redaction is built into Sedna Email and works across shared team inboxes without requiring any changes to how teams operate. You control which mailboxes the module covers and set redaction intervals to match workflows and data policies.

How does it handle attachments?

Attachments containing personal data are removed rather than partially redacted. Message bodies are partially redacted where personal data is identified. In cases where selective redaction is not possible (for example, a manually flagged message), the entire message may be redacted.

How does this compare to Microsoft Purview?

Purview governs Microsoft’s ecosystem well, but it doesn’t extend into Sedna Email. Personal Data Redaction is purpose-built for shipping inboxes: high-volume, document-heavy, and running across shared mailboxes that generic compliance suites were never designed for.