1. A method of generating a pseudonymizable document, comprising, with a processor of a computer system: receiving a set of subdocuments, wherein each subdocument is a portion of a first document that is to be converted into said pseudonymizable document; generating a first set of random values wherein each subdocument in the document corresponds to at least one of the first set of random values; generating a second set of values each based on a subdocument in the document and a corresponding value of the first set of random values; generating a set of pseudonyms wherein one or more subdocuments in the document corresponds to at least one pseudonym of the pseudonym set; generating a third set of values based on the second set of values and the pseudonym set; and generating a summary value based on the third set of values.