Redact PII from AI Prompts, Files & Documents Before ChatGPT, Claude or Gemini See It

PrivacyScrubber Agentic Guard acts as a local in-memory proxy between your workstation and autonomous AI coding agents (Cursor, Windsurf, Claude Code, Copilot). When an agent executes shell commands (guard_exec) or reads credentials (guard_read_file), output is intercepted in local RAM and secrets are replaced with anonymous tokens ([API_KEY_1], [EMAIL_1]). The remote LLM reasons exclusively over tokenized placeholders. When applying code changes (guard_apply_patch), tokens are reversed back to authentic local secrets in memory and written to disk with an automatic .bak backup. Zero secrets leave your device.

No. Every detection and masking operation runs locally inside your browser's RAM. Zero bytes of your text, documents, or session tokens leave your device. Verify this yourself: open DevTools → Network tab, test our DLP speed benchmark, or disconnect from the internet entirely — our air-gapped local processing keeps working offline.

The PrivacyScrubber Chrome extension injects real-time PII masking directly inside ChatGPT, Claude, Gemini, Microsoft Copilot (Bing Chat), Grok, Perplexity, DeepSeek, Qwen, Kimi, and Zendesk. For coding agents and autonomous workflows, explore our AI Agents Protection guide, or use the web app at privacyscrubber.com to sanitize text before pasting it into any interface.

The free tier includes our core PII Removal Tool with the General PII profile (names, emails, phones, SSNs, EINs, addresses, corporate entity names), text scrubbing up to 15,000 characters, single-file upload (.txt, .docx), and PDF text extraction up to 3 pages. Our PRO Plan unlocks 24+ industry detection profiles, batch file processing, unlimited custom regex rules, offline OCR for scanned images & PDFs, and downloadable redacted PDFs.

Yes. Our specialized financial PII profile natively detects Employer Identification Numbers (EIN/FEIN), payroll-format names (LASTNAME, FIRSTNAME), corporate employer names with legal suffixes (Inc, LLC, Corp), and US street addresses. All wage amounts, tax withholdings, hourly rates, and financial figures are preserved untouched — essential for loan underwriting and HR payroll compliance.

Yes. Paste the AI's response back into the tool and click Reveal. The 1-Click Reveal engine swaps every token ([NAME_1], [EMAIL_2], etc.) back to the original value using your volatile local session map — zero server round-trips, zero database storage.

PrivacyScrubber is designed to support de-identification under HIPAA Safe Harbor (45 CFR §164.514) for 18 PHI identifiers, GDPR Article 25/32 data minimization, and SOC 2 Type II controls by stripping identifiers in browser RAM before prompt submission. Review our Top 20 Corporate PII Guide and CISO AI Security Blueprint for detailed governance controls.

The CISO Procurement Memo is a standardized, copy-ready compliance document for enterprise IT, security architects, and procurement officers. It provides General Counsel, DPOs, and InfoSec committees with formal statutory evidence (GDPR Art. 4(8)/28, HIPAA 45 CFR § 164.502(e), CCPA § 1798.140) proving that because PrivacyScrubber runs 100% in local client RAM with 0 bytes transmitted to any server, third-party DPA/BAA contracts and lengthy vendor risk questionnaires (SIG/CAIQ) are legally non-applicable, enabling fast-track 0-day software approval.

Every software build undergoes an automated 13-suite security and performance QA pipeline in continuous integration (CI). Automated headless network sniffers verify that during PII sanitization, exactly 0 HTTP, WebSocket, or background telemetry packets leave the browser. In-memory heap profiling enforces an ultra-lightweight ceiling under 6MB RAM (5.68 MB JS Heap) and sub-75ms streaming DOM mutation scans across 5,000 live nodes, ensuring zero laptop heating and zero CPU throttle. Review the full audit in our Technical Security Specifications.

The session map exists exclusively in volatile browser RAM and is strictly isolated per tab. The moment you close the tab, reload the page, or navigate away, the entire mapping — including all original PII values and cryptographic keys — is permanently purged from memory. Read more in our Technical Security Architecture.

AI Tokens mode replaces sensitive entities with structured badges like [NAME_1] and [EMAIL_1], preserving contextual roles for LLMs (ChatGPT, Claude) and allowing 1-click restoration via Reveal Originals. Blackout mode applies permanent, solid black raster bars over sensitive pixel coordinates, physically destroying vector text layers for court filings, legal discovery, and FOIA releases with zero underlying text leakage.

Most conventional PDF editors and markup tools merely overlay black rectangles as a visual layer, leaving underlying OCR text, character coordinates, and metadata intact and extractable via Cmd+A copy or pdftotext. PrivacyScrubber executes true Secure Raster Flattening: pages are re-rendered in local RAM, PII coordinates are overwritten at the pixel level, and a fresh PDF is synthesized with zero underlying text layers, guaranteeing 100% leak-proof redactions.

Supported formats include .txt, .docx, .pdf (text-layer and scanned images via Tesseract OCR), .xlsx, and .csv. With Batch File Redaction and Excel Spreadsheet Scrub, you can download sanitized files with PII removed or export redacted PDFs with permanent raster flattening (zero underlying text layers).

PrivacyScrubber TEAMS uses Argon2id key derivation and XChaCha20-Poly1305 authenticated encryption (via libsodium WASM). Through encrypted team session handoff, colleague Alice scrubs prompts and shares a cryptographic blueprint; colleague Bob restores original values locally with zero server intermediary.

PrivacyScrubber wraps editor inputs and tokenized outputs inside closed Shadow DOM roots. This makes unredacted sensitive text completely inaccessible to DOM-scraping scripts, third-party analytics, or unauthorized browser extensions running on the host page. Learn more about our in-DOM prompt sandbox.

Yes. The official @privacyscrubber/mcp-server package runs as a local stdio-based Model Context Protocol server for Cursor, Windsurf, Claude Desktop, and VS Code. It intercepts codebase prompts, sanitizes database passwords and API tokens in RAM, and protects your software development workflows with zero external calls.

Yes. The @privacyscrubber/sdk NPM package exposes the headless sanitization engine as a programmatic Node.js & ESM library. Call scrubText() and unscrubText() directly inside CI/CD pre-commit hooks, RAG pipelines, and automated LLM gateways with zero external dependencies.

No. Switching between our 24+ industry profiles (e.g. from General to Legal & Contracts or Medical) preserves active tokens and session maps. Tokens remain restorable via Reveal until you click the Clear button explicitly.

After processing documents (PDF, DOCX, XLSX), the engine immediately overwrites all temporary ArrayBuffers at the byte level with zeroes (Uint8Array.fill(0)) before releasing them to garbage collection. Pair this with our tamper-evident audit receipts for verifiable forensic compliance.

Yes. For organizations requiring formal vendor onboarding, purchase orders (PO), or SWIFT/SEPA bank wire transfers, we provide custom invoicing with EU VAT reverse-charge support. Check our transparent pricing matrix or visit our Enterprise Solutions Hub.

No. The platform loads zero analytics trackers, third-party cookies, or fingerprinting scripts. Maintaining strict Content Security Policies (CSP) ensures third-party endpoints cannot inspect memory or DOM states. Review our full commitments in our Zero-Server Privacy Policy.

There are no centralized accounts. Team administrators configure mandatory regex rules and compliance profiles locally in the Teams Deployment Hub, then generate a cryptographically signed Blueprint URL. When team members open this link, the configuration locks client-side without any backend database.

The purchaser acts as the Team Administrator with exclusive authority to configure organization-wide custom Regex rules, corporate token taxonomy (e.g. [PATIENT_ID]), and default compliance profiles in the Teams Dashboard. When the Admin exports a cryptographically signed Blueprint with Lock Rules enabled, Managed Team Members receive a locked, read-only configuration across their Web App and Chrome Extension (badged as 🔒 Enterprise), preventing employees from altering or bypassing corporate DLP policies.

Our Custom Regex Rules Engine discovers proprietary data formats (custom ticket IDs, project codes like PROJ-1234, internal server URLs). Token Labels, in contrast, customize the replacement placeholder (e.g. renaming [NAME] to [PATIENT_ID]) to give LLMs optimal domain context without modifying regex patterns.

PrivacyScrubber utilizes a high-performance deterministic pattern matching engine running natively in browser RAM (sub-2ms execution time). Unlike cloud LLM-based redaction which can hallucinate, omit tokens, or introduce network latency, our deterministic parser guarantees 100% reproducible tokenization across 18 core Safe Harbor/GDPR entity types (names, emails, phones, SSNs, credit cards, IBANs, medical MRNs, API tokens). PRO users can also inject custom regex rules or run local offline OCR for documents.

Because PrivacyScrubber maintains a Zero-Trust Data Sanitization (ZTDS) architecture with zero server databases and zero phone-home user tracking, license custody is sovereign to the purchaser. All license tiers are strictly non-transferable. If a key is accidentally leaked or exposed, the billing owner can immediately request emergency revocation via support@privacyscrubber.com. We append the SHA-256 hash of the compromised key to our global Key Revocation List (KRL), instantly invalidating it across all client instances within 24 hours while reissuing a secure replacement.

PRO ($15/mo or $110 Lifetime) is a single-user personal license valid on up to 3 personal devices (Web, Chrome, IDE MCP). TEAMS ($99/mo flat) is an organization-wide internal workspace covering unlimited internal staff with Master Key Isolation. The Developer SDK ($199/mo or $1,990/yr) covers headless execution across unlimited internal backend nodes, microservices, ETL pipelines, and internal RAG vector databases. Embedding into customer-facing commercial SaaS for third-party resale requires an OEM/Enterprise contract.

Yes. The @privacyscrubber/mcp-server package executes strictly in local machine memory over standard stdio JSON-RPC transport. It makes zero outbound network requests, transmits zero telemetry, and performs all PII sanitization and token mapping exclusively in your local volatile RAM, satisfying stringent IDE security policies across Cursor, Windsurf, and Claude Desktop.