Pseudonymize the data of a deleted user

Platform administrators can pseudonymize the data of a deleted user.

Pseudonymizing a deleted user’s data is an irreversible action that removes their profile picture and custom field values. It also replaces their last name, first name, username, and email address with a random string of text. Platform administrators can also choose to remove the user’s external IDs. If left in place, external IDs can allow connectors to reactivate the pseudonymized user.

Pseudonymizing also removes the user's personal data from their path certificates. The certificates stay available, and their personalization tags show the tag name instead of the user's data:

• First name, last name, email address, and organization: [person_first_name], [person_last_name], [person_email], [person_organization]
• Path session title: [path_session_title]

The reference number and the authenticity verification URL stay visible, and the certificate can still be verified. The delivery date, the validity period, the credits acquired, and the path title also stay visible.

This applies only to users pseudonymized after this feature is activated for your platform. Path certificates of users pseudonymized before that keep their personal data, as do path certificates issued before October 14, 2026. Program certificates and external certificates are not affected. To activate this feature, contact your Customer Success Partner.

1. At the top of the homepage, click Users.
2. Click the tab Deleted.
3. On the right of a user, click View profile.
4. In the General section, click Pseudonymize the user’s data.
5. Optional: select the option to remove the user’s external IDs.
6. Click Confirm.

This action removes visible personal data, but keeps the user ID. If you did not remove external IDs, connectors may still identify and reactivate the user. Because the user ID is always kept, the process isn’t full anonymization in the GDPR sense.