AI PII Redaction & Client-Side DLP for Prompts & DocumentsZero Cloud Egress. 100% RAM.

Embedding raw personal data into vector databases (Pinecone, Qdrant, Weaviate, Milvus) creates permanent regulatory liability: fulfilling a single GDPR Article 17 'Right to Erasure' request requires locating high-dimensional embeddings and recalculating entire vector indexes—costing upwards of $14,000 per deletion cycle. By embedding the headless @privacyscrubber/sdk into your ingestion pipeline, raw PII is swapped with deterministic cryptographic tokens in Node.js heap (<0.065ms) before vector embedding. When an erasure request arrives, organizations simply purge the local key mapping, achieving instantaneous O(1) mathematical erasure at $0 infrastructure cost.

Zero server processing does not mean zero auditability. PrivacyScrubber generates cryptographically verifiable CISO Audit Receipts (SHA-256 integrity hash, triggered regulatory frameworks, timestamp, entity counts) directly on the client. Enterprise teams stream zero-PII telemetry locally to internal SIEM (Splunk, Datadog) via our Node.js SDK and MCP server.

PrivacyScrubber Agentic Guard acts as a local in-memory proxy between your workstation and autonomous AI coding agents (Cursor, Windsurf, Claude Code, Copilot). When an agent executes shell commands (guard_exec) or reads credentials (guard_read_file), output is intercepted in local RAM and secrets are replaced with anonymous tokens ([API_KEY_1], [EMAIL_1]). The remote LLM reasons exclusively over tokenized placeholders. When applying code changes (guard_apply_patch), tokens are reversed back to authentic local secrets in memory and written to disk with an automatic .bak backup. Zero secrets leave your device.

Yes. Our specialized financial PII profile natively detects Employer Identification Numbers (EIN/FEIN), payroll-format names (LASTNAME, FIRSTNAME), corporate employer names with legal suffixes (Inc, LLC, Corp), and US street addresses. All wage amounts, tax withholdings, hourly rates, and financial figures are preserved untouched — essential for loan underwriting and HR payroll compliance.

Yes. Most conventional redaction tools only mask visible text or cell contents, leaving hidden document properties intact. Microsoft Word (.docx) and Excel (.xlsx) files are compressed XML archives that store author identity (<dc:creator>), modifying users (<cp:lastModifiedBy>), corporate affiliation (<Company>), and revision timestamps inside docProps/core.xml and workbook properties. PrivacyScrubber's in-RAM sanitizer intercepts these archives in local browser memory, wipes original author and organization tags, eliminates custom metadata, and overwrites properties with anonymous synthetic signatures (PrivacyScrubber (Zero-Trust)) before export. Your exported files are completely clean both visibly and metadata-wise, with zero network transmission.

AI Tokens mode replaces sensitive entities with structured badges like [NAME_1] and [EMAIL_1], preserving contextual roles for LLMs (ChatGPT, Claude) and allowing 1-click restoration via Reveal Originals. Blackout mode applies permanent, solid black raster bars over sensitive pixel coordinates. Most conventional PDF editors merely overlay black rectangles as a visual layer, leaving underlying OCR text, character coordinates, and metadata intact and extractable via copy-paste. PrivacyScrubber executes true Secure Raster Flattening: pages are re-rendered in local RAM, PII coordinates are overwritten at pixel level, and a fresh PDF is synthesized with zero underlying vector text layers, guaranteeing leak-proof legal and FOIA compliance.

Solo practitioners handling confidential client sessions (ADHD coaching, therapy, executive consulting) can execute a 100% offline workflow: First, transcribe your locally recorded Zoom or Teams meeting on your own device using an offline Speech-to-Text engine (such as MacWhisper or Whisper.cpp running locally on Apple Silicon / local GPU). Second, drop the resulting .txt or .docx transcript into PrivacyScrubber at privacyscrubber.com (even with device Wi-Fi completely turned off). PrivacyScrubber strips client names, sensitive disclosures, neurodiversity/medical conditions, and identifying details into safe tokens ([NAME_1], [ORGANIZATION_1]) in volatile RAM. Third, submit the sanitized transcript to Claude or ChatGPT to extract themes, check coaching quality, or draft summaries. Finally, click Reveal in PrivacyScrubber to rehydrate original client names locally. Zero client personal data ever touches third-party servers.

The free Community Tier includes universal consumer PII masking (Names, Phones, Emails, National IDs, Credit Cards, IPs, URLs) with 15,000 characters per scrub, a 5,000-character free quota across all 30 specialized industry detection profiles, single-file upload (.txt, .docx), and PDF extraction up to 3 pages. It also includes free access to the Developer SDK (@privacyscrubber/sdk) and IDE MCP Server (@privacyscrubber/mcp-server) with built-in session quotas — zero credit card, zero passwords, and zero accounts required. For solo practitioners and developers, you can also claim a 1-Year PRO Reviewer Pass ($180 value) 100% free with an honest review on G2.

PRO ($15/mo or $110 Lifetime) is a single-user personal license valid on up to 3 personal devices (Web, Chrome, IDE MCP). TEAMS ($99/mo flat) is an organization-wide internal workspace covering unlimited internal staff with Master Key Isolation and centralized rule locking. The Developer SDK ($299/mo or $2,990/yr) covers headless execution across unlimited internal backend nodes, microservices, ETL pipelines, and internal RAG vector databases. Embedding into customer-facing commercial SaaS for third-party resale requires an OEM/Enterprise contract.

PrivacyScrubber TEAMS operates with zero central databases and zero user accounts. Team administrators configure mandatory regex rules, compliance profiles, and custom token labels in the Teams Deployment Hub, then generate a cryptographically signed Blueprint URL with Lock Rules enabled. When colleagues open this link, the configuration locks client-side across their Web App and Chrome Extension (badged as [ENTERPRISE]). For day-to-day work, colleague Alice sanitizes prompts and shares a cryptographic session blueprint encrypted via Argon2id and XChaCha20-Poly1305 via the ZTDS™ zero-server handoff protocol; colleague Bob reveals original values locally with zero server intermediary.

Yes. The official @privacyscrubber/mcp-server package runs as a local stdio-based Model Context Protocol server for Cursor, Windsurf, Claude Code, and VS Code. It executes strictly in local machine memory over standard stdio JSON-RPC transport with zero outbound network requests, zero telemetry, and 100% volatile RAM mapping. It is 100% free to use with built-in session quota directly in your IDE without requiring a credit card or account registration. PRO and TEAMS tiers provide unlimited character volume and enterprise policy synchronization.

Yes. The @privacyscrubber/sdk NPM package exposes the headless sanitization engine as a programmatic Node.js & ESM library. It integrates with zero external dependencies using a 1-line wrapper like wrapOpenAI(new OpenAI()) or via standalone sanitize() and restore() with <1ms local RAM latency. It intercepts prompts before network egress, tokenizes PII and credentials, and rehydrates streaming SSE tokens via sliding window reconstruction. It is 100% free to test locally with a permanent free quota (15k chars General / 5k chars Specialized)—no credit card or account required. Commercial licensing ($299/mo or $2,990/yr) unlocks unlimited high-throughput production nodes.

When enterprise prospects evaluate generative AI SaaS applications, deals frequently stall for 3 to 6 months in InfoSec and DPO reviews over concerns about confidential customer data reaching third-party LLM providers. By embedding the headless @privacyscrubber/sdk, AI SaaS vendors establish an in-memory client-side or edge sanitization boundary (<0.8ms latency) that converts sensitive identifiers into reversible surrogates before prompts leave the customer environment. SaaS vendors provide customers with an official ZTDS A4 Certificate of Conformance, proving 0.00 bytes data egress to cloud model hosts. This replaces contentious Data Processing Agreements (GDPR Art. 28) and invasive vendor audits with automated cryptographic receipts, converting multi-month procurement gridlocks into 48-hour sign-offs.

PrivacyScrubber is certified under the open Zero-Trust Data Sanitization standard (IETF draft RFC v1.0, Certificate ID: ZTDS-CERT-2026-PRIVACYSCRUBBER-WEB-D02DC6). Corporate auditors, CISOs, and Data Protection Officers can independently inspect and verify our cryptographic invariants in real time at https://ztds.ai/verify/?target=privacyscrubber-web. The portal runs an offline Ed25519 signature validation directly in browser memory and generates an official, printable A4 Conformance Certificate. Procurement teams can download this signed PDF to attach directly to vendor risk assessments (SIG Lite, CAIQ) and statutory Technical and Organizational Measures (TOMs) dossiers under GDPR Art. 32.

Under EU GDPR Article 32, EU AI Act Article 50, and CCPA/CPRA, corporate officers, board directors, and Data Protection Officers face direct personal administrative fines and heightened liability if an organization fails to implement proactive, state-of-the-art technical safeguards for AI data ingestion. PrivacyScrubber provides a statutory defense-in-depth safe harbor by executing all tokenization in volatile workstation RAM: (1) direct PII is physically blocked from external cloud egress, (2) contextual quasi-identifiers are minimized across 30 specialized industry profiles, and (3) deterministic cryptographic audit receipts prove continuous technical due diligence. This establishes an evidentiary audit trail that eliminates officer negligence claims and protects leadership from regulatory exposure.