Redact receipt
Receipts
Redact Receipt
Remove PII from a receipt payload while preserving cryptographic proof.
POST
Redact receipt
Removes PII from a receipt’s payload while preserving the cryptographic proof. The receipt’s signature, transparency log entry, and Merkle inclusion proof remain intact — only the
payload_json is replaced with a redaction marker.
Use this for GDPR right-to-erasure requests on receipts containing personal data.
Path parameters
string
required
UUID of the receipt to redact.
Headers
string
required
UUID for idempotent redaction.
Response
string
UUID of the redacted receipt.
string
redactedstring
ISO 8601 timestamp of redaction.
What changes after redaction
status→redactedpayload_json→{"redacted": true, "redacted_by": "tenant_request"}- A
RECEIPT_REDACTevent is anchored in the transparency log - All other fields (signature, log proof, receipt_type) are preserved
Authorizations
API key for machine-to-machine authentication
Path Parameters
Receipt UUID
Body
application/json

