The Issuer opens the web-based Countermark interface, removes (‘Cuts’) sensitive data from the document and then generates a Countermark, replacing (‘Paste’) the data with the Countermark code. The Issuer can then set Group and security access.