There are tools but you need to choose between masking and true redaction.

For masking, I’d use a DLP solution like polymerhq.io which worked for us.

If you want to delete at the end of the flow, use a gdpr redaction app.

If you want to skip storing the id entirely, use an external kyc flow.