CCPA & CPRA Compliance for Generative AI

AI Summary / Key Takeaways

Verified Zero-Trust Logic

"PrivacyScrubber enforces CCPA/CPRA (Cal. Civ. Code § 1798.100–1798.199) and CPPA Automated Decisionmaking Technology (ADMT) regulations through Zero-Trust local tokenization. By de-identifying California resident records and Sensitive Personal Information (SPI under § 1798.140(ae)) in browser RAM before AI transmission, organizations satisfy § 1798.140(m) de-identification standards, prevent unauthorized third-party 'sharing,' and mitigate § 1798.150 statutory class-action exposure."

AI Answer Capsule • Authoritative GEO Definition

How to prevent CCPA / CPRA personal data sale and sharing penalties when utilizing AI models?

Avoid CPRA 'sale' and 'sharing' liabilities by de-identifying California consumer records before submitting data to third-party AI APIs. PrivacyScrubber strips consumer identifiers locally, ensuring data sent to LLMs does not constitute consumer personal information under Cal. Civ. Code § 1798.140.

Standard: California Consumer Privacy Act (CCPA/CPRA § 1798.140)
<1ms Local RAM • 0-Byte Egress
100% Local · Zero Server Airplane Mode Verified
ZTDS CPRA COMPLIANCE GATEWAY
CCPA §1798.140 Safe Harbor
<1.4ms
RAM Latency
0 Bytes
Third-Party Sale
0 Subprocessors
Data Sovereign
Zero-Data-Sale Architecture: Because no PII crosses the wire, sharing prompts with AI does not trigger CCPA "sale" or "sharing" clauses.
Right to Opt-Out by Design: Zero persistence in external storage renders data deletion and opt-out requests instantly satisfied.
Air-Gapped Operation: 100% local in-RAM execution verified via Airplane Mode.
Deploy Extension Deploy TEAMS ($99/mo)
Airplane Mode Verified · Zero Cloud Ingestion Inspect Architecture
Peer-Reviewed Foundations • IETF Standards Track
ORCID: 0009-0002-0642-5985 Wikidata: Q141546647
IETF Specification CERN / Zenodo DOI OSF Benchmark (<2ms) SSRN / Elsevier Law Archive / OSF ZTDS™ RFC v1.0 Verified
Live Turnkey Simulator · ZTDS Engine

Interactive PII Detection & Sanitization Sandbox

Test real-time client-side RAM tokenization. Choose a specialized preset or paste your own raw prompt to test instant reversible redaction.

Protected in CCPA / CPRA: CONSUMER_NAME DRIVER_LICENSE GEOLOCATION ACCOUNT_LOGIN ETHNICITY
0 Bytes Server Egress
<1.8ms Latency
Select Industry Test Payload:
Raw Input Payload
0 chars
RAM-Only Isolated Session
1-Click Safe AI Launch:
Automated Detection Classes:
CONSUMER_NAME DRIVER_LICENSE GEOLOCATION ACCOUNT_LOGIN ETHNICITY
Open in Full Workspace
Satisfy CCPA § 1798.100(c) Data Minimization & Purpose Limitation by tokenizing consumer PII in local browser RAM before AI egress.
Protect CPRA § 1798.121 & § 1798.140(ae) Sensitive Personal Information (SSN, driver's license, financial accounts, precise geolocation).
Align with Cal. Civ. Code § 1798.140(m) De-Identified Data safe harbor by keeping re-identification keys strictly on your local endpoint.
Mitigate § 1798.150 Private Right of Action statutory damages ($100–$750 per consumer per incident) by preventing third-party AI data breaches.
Generate SHA-256 signed Compliance Receipts (available on the TEAMS plan) for California Privacy Protection Agency (CPPA) audits.

Enterprise-Grade AI Privacy

Add custom redaction rules and priority support with PRO.

GO PRO

Executive Summary: CCPA / CPRA

The California Consumer Privacy Act (CCPA) and its amendment, the CPRA, mandate that businesses implement strict data minimization and provide clear mechanisms for consumers to opt-out of data 'sharing' with third-party service providers. PrivacyScrubber enables 100% compliance by neutralizing consumer identifiers locally before they reach AI models. This ensures that sensitive personal information (SPI) never enters third-party training pipelines, effectively eliminating the 'sharing' event and satisfying the CPRA's core privacy-by-design requirements.

Privacy Checkpoints

  • CPRA Data Minimization: Sanitize only necessary attributes before AI analysis.
  • Sensitive PII Protection: Redact government IDs, account credentials, and precise geolocation locally.
  • Zero-Sharing Proof: Ensure 'sharing' under CCPA never occurs by keeping raw PII on-device.
  • Service Provider Oversight: Maintain absolute control over how third-party LLMs process consumer data.
Scope: Local Client RAM Verified Zero-Egress

PII Detection Matrix

Entity Type Exposure Risk Local Edge Control
Government IDs Critical (CPRA Violation) Pattern-Based Masking
Consumer Geolocation High (Sensitive PII) Lat/Long & Address Scrubbing
Account Credentials Critical (Security Breach) [TOKEN_N] Redaction
Token Format: Deterministic [TYPE_N] <2ms In-Memory Scrub
California Privacy Protection Agency (CPPA) & US State Privacy Board

Select Your CCPA / CPRA & ADMT Governance Mandate

Cal. Civ. Code § 1798.100(c) • § 1798.121 • § 1798.140(v) • § 1798.150
Chief Privacy Officer / General Counsel § 1798.140(v) • § 1798.121

Statutory De-Identification & SPI Opt-Out Defense

Enforce Cal. Civ. Code § 1798.140(m) & § 1798.140(v)(2) statutory de-identification before consumer prompts or records reach external AI vendors. Neutralize § 1798.121 Right to Limit Sensitive Personal Information (SPI) exposure.

Review Cal. Civ. Code Statutory Matrix
CISO / VP Data Engineering § 1798.150 • § 1798.100(c)

Private Right of Action Shield & Data Minimization

Eliminate statutory damages ($100–$750 per consumer per incident under § 1798.150) by preventing unencrypted SSNs, driver's licenses, financial accounts, and medical data from leaving local device RAM.

Inspect Zero-Egress Architecture
Privacy Ops / DSAR & ADMT Lead § 1798.105 • CPPA ADMT Rules

Impossible Deletion Prevention & Multi-State Parity

Prevent consumer PII from entering immutable LLM weights where § 1798.105 Deletion Requests cannot be fulfilled. Harmonize compliance across California, Texas TDPSA, Virginia VCDPA, and Colorado CPA.

Execute CPPA Enforcement Verification

CCPA / CPRA Statutory Compliance for Generative AI: Enforcing Cal. Civ. Code § 1798.100(c) & § 1798.140(m) in Local RAM

Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), alongside enforcement directives from the California Privacy Protection Agency (CPPA), transmitting unredacted consumer records to third-party generative AI models triggers severe statutory exposure. Under Cal. Civ. Code § 1798.100(c), collection, use, retention, and sharing of a consumer's personal information must be reasonably necessary and proportionate to achieve the primary purpose for which it was collected. Furthermore, disclosing identifiers or Sensitive Personal Information (SPI) (§ 1798.140(ae)) to an external AI provider without strict service-provider contractual restrictions and technical safeguards risks classification as an unauthorized disclosure or "Sharing" (§ 1798.140(ad)), while exposing the enterprise to the § 1798.150 Private Right of Action ($100 to $750 per consumer per incident) and administrative fines up to $7,500 per intentional violation (§ 1798.199.90).

PrivacyScrubber establishes a deterministic Technical Safe Harbor (Defense-in-Depth) for California consumer privacy in AI workflows by executing client-side sanitization inside volatile device RAM prior to any network transmission. Built on the ZTDS™ (Zero-Trust Data Sanitization) protocol, the appliance strips direct identifiers and CPRA Sensitive Personal Information at the browser, IDE, or backend SDK boundary—substituting synthetic tokens ([CONSUMER_1], [SSN_1], [CA_DL_1]) while maintaining a strictly local token dictionary. Under Cal. Civ. Code § 1798.140(v)(2), "Personal Information" does not include de-identified or aggregate consumer information (§ 1798.140(m)), enabling your teams to leverage frontier AI models with verifiable CCPA data minimization controls.

Cal. Civ. Code § 1798.140(m) & (v)(2) De-Identification Standard

Pre-Transmission De-Identification Outside Third-Party Scope

Under § 1798.140(v)(2), Personal Information excludes de-identified consumer information where the business implements technical safeguards that prohibit re-identification by external recipients (§ 1798.140(m)).

ZTDS™ Statutory Mapping: Raw consumer identifiers are replaced with synthetic tokens in local RAM before network socket creation. External AI vendors never receive the token dictionary and cannot re-identify California residents.

Cal. Civ. Code § 1798.121 & § 1798.140(ae) Sensitive Personal Information

CPRA Sensitive Personal Information (SPI) Zero-Egress

§ 1798.121 grants consumers the right to limit the use and disclosure of SPI—including SSNs, driver's licenses, state IDs, passport numbers, financial accounts, precise geolocation, health data, and contents of consumer communications.

ZTDS™ Statutory Mapping: Enforces CPRA sensitive data AI protection across 30 Specialized Industry Profiles, physically blocking SPI categories from leaving the workstation.

Cal. Civ. Code § 1798.100(c) & § 1798.105 Minimization & Right to Delete

CPPA Data Minimization & Preventing Un-Deletable Model Ingestion

The CPPA's Enforcement Division strictly enforces § 1798.100(c) data minimization across every consumer touchpoint. Moreover, once consumer PII enters an external LLM's training corpus or third-party log, fulfilling a § 1798.105 Right to Delete request becomes technically impossible.

ZTDS™ Statutory Mapping: Zero consumer PII is ever ingested by external AI providers, eliminating downstream third-party deletion cascades and proving proportionate data minimization by design.

Cal. Civ. Code § 1798.150 & CPPA ADMT Class-Action & ADMT Shield

Mitigating § 1798.150 Statutory Damages & ADMT Profiling Risk

Unauthorized exfiltration or disclosure of nonencrypted and nonredacted personal information triggers statutory class-action damages of $100–$750 per consumer under § 1798.150(a)(1), while CPPA Automated Decisionmaking Technology (ADMT) regulations scrutinize AI profiling of identifiable consumers.

ZTDS™ Statutory Mapping: Redacts all § 1798.81.5(d)(1)(A) breach-triggering identifiers locally and generates SHA-256 compliance receipts demonstrating reasonable security procedures and practices.

Cal. Civ. Code § 1798.140(m) De-Identification Boundary

Zone A (Business Controlled Endpoint RAM) vs. Zone B (External AI Cloud)

Zero SPI / PII Egress
Zone A: Business Endpoint (Volatile RAM) § 1798.100(c) Controlled

Raw California consumer records, DSAR packets, HR candidate files, and SPI remain strictly inside local device RAM.

Raw Consumer Record: "CA Resident Elena Vance (CA DL: D8492014, SSN: 554-00-9182) disputed charge on Acct #4491..."
Volatile Token Dictionary: [NAME_1] ↔ Elena Vance | [CA_DL_1] ↔ D8492014 | [SSN_1] ↔ 554-00-9182
CPPA Audit Proof: SHA-256 Receipt #7b2d...e401 (§ 1798.100(c) Minimization Verified)
Strict Re-Identification Quarantine Wiped on Tab Close
§ 1798.140(m) Gate
→
Tokens Only
Zone B: External Commercial LLM Provider § 1798.140(v)(2) Excluded

External AI endpoints receive only synthetic tokens that cannot be linked to any household or consumer. No "Sale" or "Sharing" of Personal Information occurs.

Outbound Prompt: "CA Resident [NAME_1] (CA DL: [CA_DL_1], SSN: [SSN_1]) disputed charge on Acct [ACCOUNT_1]..."
LLM Response: "Drafting Reg E provisional credit notice for [NAME_1] regarding Acct [ACCOUNT_1]..."
Local Reverse Scrub (Zone A): Restores Elena Vance & Acct #4491 exclusively in browser RAM.
Zero § 1798.105 Deletion Trap Zero § 1798.150 Breach Exposure
US Privacy Counsel & CISO Architecture Evaluation

Comparing CCPA / CPRA & US State Privacy AI Architectures

Why relying solely on Service Provider addenda or cloud DLP gateways leaves enterprises exposed to CPPA data minimization enforcement and § 1798.150 class-action litigation.

CCPA / CPRA Statutory Requirement PrivacyScrubber (ZTDS™ Local RAM) Cloud DLP / API Redaction Gateway LLM "Service Provider" Contract Only Employee AI Policy Only
§ 1798.100(c) Data Minimization Enforces technical minimization in local RAM before any external transmission. Transmits unredacted consumer PII over the network to a third-party cloud proxy first. Violates minimization when full consumer profiles are sent for routine text summarization. Fails CPPA Enforcement Division technical safeguard audits.
§ 1798.121 Sensitive Personal Info (SPI) 100% client-side redaction of SSN, CA DL, financial, health, and biometric identifiers. Exposes SPI in transit and inside cloud proxy inspection buffers. Triggers § 1798.121 Right to Limit SPI obligations if used beyond strict service scope. Uncontrolled SPI leakage into consumer LLM chat histories.
§ 1798.105 Right to Delete Compliance Zero PII reaches the LLM; volatile local token dictionary is wiped on tab close. Requires cascading DSAR deletion across cloud proxy audit logs. Requires propagating § 1798.105 deletion requests across every AI vendor API log. Impossible to delete consumer PII once ingested into model weights.
§ 1798.150 Private Right of Action Defense Redacts nonencrypted/nonredacted § 1798.81.5(d) fields locally + SHA-256 receipts. Creates a centralized cloud honeypot of consumer PII subject to third-party breaches. Vendor breach of unredacted prompts triggers $100–$750/consumer statutory liability. Zero defense against statutory class-action litigation.
50-State Omnibus Harmonization Single client-side architecture satisfies CCPA, TDPSA, VCDPA, CPA, CTDPA, and MHMDA. Requires state-by-state DPA and subprocessor disclosures. Requires separate Data Protection Assessments (DPAs) for each AI vendor across 19+ states. Exposes enterprise to state AG sweeps (CA, TX, CO, CT).
US Privacy & AI Governance Playbooks

6 Technical Playbooks for CCPA / CPRA & US State AI Privacy Laws

Operationalize statutory de-identification and data minimization across California and the entire US state AI privacy regulatory patchwork.

PLAYBOOK 01 • CAL. CIV. CODE § 1798.121 CPRA Sensitive PII (SPI)

Automated Redaction of CPRA Sensitive Personal Information

Under § 1798.140(ae) and § 1798.121, Sensitive Personal Information includes Social Security numbers, California driver's licenses, state ID cards, passport numbers, financial accounts with credentials, precise geolocation, and health/genetic data. PrivacyScrubber strips all SPI categories in local RAM before customer support or claims teams prompt external LLMs.

Statute: § 1798.121 / § 1798.140(ae) Inspect CPRA SPI Playbook →
PLAYBOOK 02 • CAL. CIV. CODE § 1798.100(c) CPPA Enforcement Priority

Enforcing CPPA Data Minimization in DSAR & Consumer Support

Following the CPPA Enforcement Division's formal Advisories on Data Minimization, businesses must not collect, process, or disclose more consumer data than strictly necessary—even when fulfilling consumer requests (§ 1798.105 / § 1798.110). PrivacyScrubber enables privacy teams to summarize complex DSAR files with AI while keeping 100% of consumer identifiers inside local browser RAM.

Statute: § 1798.100(c) / 11 CCR § 7002 View Minimization Controls →
PLAYBOOK 03 • CPPA ADMT & COLORADO AI ACT Automated Decisionmaking

De-Biasing & Anonymizing HR, Lending & Underwriting AI Prompts

Both the CPPA's Automated Decisionmaking Technology (ADMT) regulations and the Colorado AI Act (SB 24-205) govern high-risk AI decisions in employment, financial lending, housing, and insurance. By stripping candidate names, demographic markers, ZIP codes, and protected attributes in local RAM prior to LLM evaluation, enterprises prevent algorithmic proxy discrimination and profiling of identifiable consumers.

Statute: CPPA ADMT / CO SB 24-205 Read Colorado AI & CPA Guide →
PLAYBOOK 04 • TEXAS TDPSA & VIRGINIA VCDPA State AG Enforcement

Multi-State Omnibus Harmonization (Texas TDPSA & Virginia VCDPA)

The Texas Data Privacy and Security Act (TDPSA, Tex. Bus. & Com. Code Ch. 541) and Virginia VCDPA require explicit opt-in consent before processing sensitive data and mandate Data Protection Assessments for high-risk processing. Client-side ZTDS™ de-identification satisfies statutory de-identification exclusions across Texas, Virginia, Connecticut, and Florida simultaneously.

Statute: TX Ch. 541 / VA § 59.1-575 Explore Texas TDPSA Playbook →
PLAYBOOK 05 • WASHINGTON MHMDA & CMIA Consumer Health Data

Consumer Health & Wellness Data Protection Beyond HIPAA

Digital health apps, fertility trackers, and wellness brands not covered by HIPAA face strict regulation under the California Confidentiality of Medical Information Act (CMIA) and Washington's My Health My Data Act (MHMDA), which carries a private right of action. PrivacyScrubber strips consumer health telemetry and symptoms locally before AI analysis.

Statute: WA MHMDA / CA CMIA Review Washington MHMDA Guide →
PLAYBOOK 06 • CAL. CIV. CODE § 1798.150 Reasonable Security Shield

Documenting Reasonable Security Procedures with SHA-256 Receipts

To defend against a § 1798.150 private right of action or an Attorney General civil investigative demand across Connecticut CTDPA and Florida FDBR, enterprises must prove they implemented and maintained reasonable security procedures prior to any incident. Every PrivacyScrubber scrub generates a cryptographic SHA-256 compliance receipt for your legal defense ledger.

Statute: § 1798.150 / § 1798.81.5 Read CCPA Implementation Guide →
Unified 5-Plane Zero-Trust Architecture

Deploy Statutory De-Identification Across Every Consumer Touchpoint

Compare PRO ($15) • TEAMS ($99) • SDK ($299)
01. Web App
Browser RAM Scrubber

15k chars free on General Profile; 5k trial quota across 30 vertical profiles. Sanitize DSAR PDFs, DOCX, and CSVs locally.

02. Chrome MV3
In-DOM AI Shield

Intercepts consumer PII and SPI inside ChatGPT, Claude, Gemini, and Zendesk before outbound transmission.

03. MCP Server
IDE Stdio Firewall

@privacyscrubber/mcp-server keeps California consumer test data out of Cursor and Claude Desktop clouds.

04. Developer SDK
Node.js / WASM Engine

@privacyscrubber/sdk ($299/mo) de-identifies consumer payloads in backend APIs and RAG pipelines at <1ms latency.

05. Teams Cockpit
Privacy Governance Hub

$99/mo flat for unlimited seats. Centralized SPI rules, encrypted session handoff, and CPPA audit receipt exports.

CPPA Cybersecurity Audit & Data Protection Assessment Walkthrough

5-Step Privacy Counsel & CPPA Verification Protocol (Airplane Mode)

§ 1798.140(m) De-Identification Verified

Use this deterministic 5-step protocol to demonstrate to Privacy Counsel, state regulators, or independent cybersecurity auditors that your AI workflows satisfy Cal. Civ. Code § 1798.100(c) and § 1798.140(m) with zero external PII egress:

STEP 01
Open DevTools Network Log

Launch PrivacyScrubber Web or Chrome Extension, open Chrome DevTools (F12 → Network), and clear recorded traffic.

STEP 02
Activate Airplane Mode

Disconnect Wi-Fi or set DevTools Network throttling to Offline to prove zero third-party cloud dependency.

STEP 03
Scrub California SPI Sample

Paste a synthetic California consumer record containing SSN, CA driver's license, email, and financial account; verify instant token replacement.

STEP 04
Download SHA-256 Receipt

Export the CISO Compliance Receipt for your Data Protection Assessment binder and verify 0 outbound network requests.

STEP 05
Verify Volatile Wipe

Close the browser tab and verify that the local token dictionary is completely zeroized from RAM, preventing external re-identification.

Relevance-Mapped Industry Profile

CCPA / CPRA Consumer Privacy Profile: Detection Coverage

California Consumer Privacy Act (Cal. Civ. Code § 1798.100–1798.199) and CPRA ADMT ruleset. De-identifies California consumer records and Sensitive Personal Information (SPI) under § 1798.140(m) locally.

30 Specialized Industry Profiles Active in Web, Extension & MCP

Top 6 CCPA / CPRA Sensitive Entity Types Detected & Scrubbed

[CONSUMER_NAME] Critical (§ 1798.140(v) Personal Info)

California Consumer Identity

Transform: Elena Martinez → [NAME_1]
[SSN_DRIVERS] Critical (§ 1798.140(ae) SPI)

SSN & CA Driver's License

Transform: CA-DL-D8821904 → [ID_1]
[PRECISE_GEO] High (§ 1798.121 SPI Limit)

Precise Geolocation (<1,850 ft)

Transform: 34.0522° N, 118.2437° W → [GEO_1]
[CONSUMER_EMAIL] High (§ 1798.135 Do Not Share)

Consumer Email & Opt-Out ID

Transform: e.martinez@calmail.com → [EMAIL_1]
[DEVICE_ID] Medium (§ 1798.140(aj) Identifier)

Unique Advertising / Cookie ID

Transform: IDFA-9921-884A → [DEVICE_1]
[FINANCIAL_ACCT] Critical (§ 1798.150 Private Action)

Consumer Bank & Card Account

Transform: ACCT-4490-8821 → [ACCOUNT_1]

Continuous Detection Engine Expansion & Custom Regex Sovereignty

The 6 entity types above represent the core detection baseline for CCPA / CPRA. Our zero-trust engine detects hundreds of additional data classes and is continuously updated with new heuristic patterns, shadow AI leak vectors, and custom regulatory rulesets. Need proprietary database IDs or internal project codenames masked? PRO and TEAMS users can define unlimited custom regular expressions running 100% locally in browser RAM.

Explore PII Scanner
Engine Workflow

How the PrivacyScrubber Engine Solves This

Interactive Tool Controls for CCPA / CPRA. Hover for specs.

California Consumer PI Shield

The Browser Extension masks consumer identifiers, phone numbers, and browsing metadata before AI processing.

Technical Audit Data
  • Engine WASM-Accelerated
  • Privacy 100% Local RAM
  • Security Zero-Server Leak

CPRA Sensitive Personal Info (SPI)

Enforce strict local protection for financial accounts, SSNs, and precise geolocation data per CPRA § 1798.121 regulations.

Technical Audit Data
  • Engine WASM-Accelerated
  • Privacy 100% Local RAM
  • Security Zero-Server Leak

Mitigate § 1798.150 Statutory Liability

Prevent consumer class-action exposure by ensuring zero raw personal information is transmitted to third-party AI servers.

Technical Audit Data
  • Engine WASM-Accelerated
  • Privacy 100% Local RAM
  • Security Zero-Server Leak

CCPA Technical Implementation Mapping

Deep architectural mapping of Zero-Trust Data Sanitization (ZTDS) controls to industry-wide regulatory standards.

CCPA § 1798.100(c)
Control Data Minimization & Purpose Limitation
Audit Pre-Egress Client RAM Tokenization (<1.4ms)
CPRA § 1798.121 & § 1798.140(ae)
Control Sensitive Personal Information (SPI) Limitation
Audit Local Masking of SSNs, Financial Accts & Geolocation
CCPA § 1798.105
Control Consumer Right to Delete (RTBF)
Audit Zero Raw PII in AI Context + O(1) RAM Zeroization
CCPA § 1798.140(m)
Control Statutory De-Identified Data Standard
Audit Endpoint-Only Token Dictionary Custody
CCPA § 1798.150
Control Data Breach Private Right of Action Shield
Audit Zero-Server Architecture + SHA-256 Audit Receipts
CPPA ADMT Regulations
Control Automated Decisionmaking & Profiling Safeguards
Audit Demographic & Identity Neutralization Before Prompting

Zero-Trust Verification Signature

The above technical controls are enforced deterministically by the PrivacyScrubber Local Engine. All redaction cycles generate zero server-side telemetry, satisfying global data residency requirements for CCPA institutions.

Verified Compliance Architecture

Hardened Audit Standards

Neutralizing California Consumer Privacy Act (CCPA/CPRA) § 1798.140 Sensitive Personal Information prior to AI sharing.

GDPR
Article 25

Privacy by design at the engineering layer.

View architecture 0-Byte Egress
SOC 2
CC6.1

No data persistence on untrusted infrastructure.

View architecture 0-Byte Egress
NIST 800-53
PT-2 / PT-3

Federal PII minimisation and transparency controls.

View architecture 0-Byte Egress
ISO 27001
A.8.11

Data masking as a core organisational control.

View architecture 0-Byte Egress
HIPAA
Safe Harbor

Satisfies Safe Harbor de-identification requirements.

View architecture 0-Byte Egress
Explore full Compliance Center

CCPA / CPRA Compliance Library

Step-by-step redaction workflows for CCPA / CPRA environments.

All Solutions Catalog →
CCPA AI Compliance
ccpa

CCPA AI Compliance

Comply with CCPA when deploying ChatGPT and Claude. Redact California resident PII locally in browser RAM before prompt transmission with zero egress.

Playbook • Zero-Egress Read Guide →
CCPA Data Minimization for AI
ccpa

CCPA Data Minimization for AI

Apply CCPA and CPRA data minimization principles to enterprise AI workflows. Reduce personal information exposure in ChatGPT, Claude, and enterprise LLMs.

Playbook • Zero-Egress Read Guide →
CPRA Sensitive Personal Information and AI
ccpa

CPRA Sensitive Personal Information and AI

Protect California CPRA Sensitive Personal Information (SPI) before ChatGPT ingestion. Zero-trust client-side redaction for Cal. Civ. Code § 1798.100.

Playbook • Zero-Egress Read Guide →
US AI Privacy Laws 2026
compliance

US AI Privacy Laws 2026

Comprehensive guide to US AI privacy laws: HIPAA Safe Harbor, CCPA/CPRA, and state acts (Texas, Virginia, Colorado). Air-gapped local PII sanitization.

Playbook • Zero-Egress Read Guide →
Texas TDPSA AI Compliance
compliance

Texas TDPSA AI Compliance

Ensure Texas Data Privacy and Security Act (TDPSA) compliance for ChatGPT, Claude, and enterprise AI workflows. Mask Texas consumer PII and sensitive data locally.

Playbook • Zero-Egress Read Guide →
Virginia VCDPA AI Data Privacy
compliance

Virginia VCDPA AI Data Privacy

Satisfy Virginia Consumer Data Protection Act (VCDPA) requirements for generative AI. Implement client-side pseudonymization and automated Data Protection Impact Assessments.

Playbook • Zero-Egress Read Guide →
Colorado AI Act (SB 205) & CPA
compliance

Colorado AI Act (SB 205) & CPA

Navigate the Colorado AI Act (SB 205) and Colorado Privacy Act (CPA). Prevent algorithmic discrimination and manage high-risk AI system obligations with local data sanitization.

Playbook • Zero-Egress Read Guide →
Washington My Health My Data Act
compliance

Washington My Health My Data Act

Comply with Washington My Health My Data Act (MHMDA) when using AI. Protect non-HIPAA consumer health, wellness, and biometric data from cloud LLM leakage with zero-trust redaction.

Playbook • Zero-Egress Read Guide →
Connecticut CTDPA & Florida FDBR
compliance

Connecticut CTDPA & Florida FDBR

Master Connecticut (CTDPA) and Florida Digital Bill of Rights (FDBR) compliance for generative AI. Enforce automated profiling opt-outs and biometric data protection.

Playbook • Zero-Egress Read Guide →

Compare Edition Features

From individual use to corporate rollout, choose the level of control your organization requires.

Core Capabilities
Free
Web Only
PRO
$15/mo or $110 Lifetime
TEAMS
$99/mo
ENTERPRISE
Custom Tier
100% Local Processing (Airplane Mode)
Text Paste & Single File Docs 15k General / 5k Verticals UNLIMITED UNLIMITED UNLIMITED
Batch Processing & Background OCR —
Custom Regex & Specific Redaction Rules —
Chrome Extension Native App —
Silent Corporate Deployment (MDM) — —
Policy Control Center & Enforcement — —
IDE MCP Server & Headless Node.js SDK MCP Free MCP Unlimited MCP + Team Sync SDK ($299/mo) & Air-Gap
On-Premise Source Code License — — —
100% Air-Gapped Operation — — —
Dedicated GRC Support — — —
Try Free Details Deploy TEAMS Enterprise Hub

Complementary AI Privacy Hubs & Frameworks

Cross-framework zero-trust sanitization workflows and enterprise compliance architectures.

All Solutions & Frameworks →
GDPR
Enforce GDPR Art. 25, Art. 32 & EDPB 01/2020 Use Case 2 for AI prompts. Tokenize EU personal data in local browser RAM with zero cloud egress.
Explore
Compliance
Zero-Trust AI Compliance & Trust Center. Operationalize GDPR Art. 25/32, HIPAA Safe Harbor, SOC 2 Type II, ISO 27001 & EU AI Act in local browser RAM.
Explore
Legal
De-identify depositions, NDAs, and case records locally. Securely protect Attorney-Client Privilege under ABA Model Rule 1.6 with zero-server ZTDS.
Explore
Marketing
ZTDS™ marketing privacy. Safely analyze customer segments and CRM exports without exposing PII to external AI models using local in-memory tokenization.
Explore
Document Formats
ZTDS™ format sanitization. Zero-trust stream and batch parsing for PDF, DOCX, CSV, and Parquet data in local memory with zero network egress.
Explore
Security
Govern corporate generative AI adoption. Deploy a mathematically verifiable, zero-trust data sanitization gateway to redact PII at the endpoint.
Explore
Compliance FAQ

Frequently Asked Questions

Common questions about deploying zero-trust AI for CCPA / CPRA Teams.

How does PrivacyScrubber satisfy CCPA/CPRA Data Minimization (§ 1798.100(c)) and De-Identification (§ 1798.140(m))?
Under Cal. Civ. Code § 1798.100(c) and the CPPA's April 2024 Enforcement Advisory, businesses must apply data minimization to every collection and disclosure event. PrivacyScrubber replaces consumer identifiers with synthetic tokens ([NAME_1], [ID_1]) locally in browser RAM before any prompt leaves your workstation. Because the re-identification dictionary never leaves your device, the payload transmitted to the LLM satisfies § 1798.140(m) de-identification controls.
How does local tokenization protect Sensitive Personal Information (SPI) under CPRA § 1798.121?
CPRA § 1798.121 and § 1798.140(ae) grant consumers the right to limit the use and disclosure of Sensitive Personal Information—including SSNs, driver's licenses, financial account credentials, precise geolocation, health data, and union membership. PrivacyScrubber strips all SPI categories in local RAM before external AI processing.
Does using PrivacyScrubber require a CCPA § 1798.100(d) Service Provider addendum with PrivacyScrubber?
No. PrivacyScrubber operates 100% locally in your browser, IDE, or Node.js environment with zero server-side data collection. Because we never receive, retain, or process consumer personal information, PrivacyScrubber is not a third-party data recipient or subprocessor.
How does PrivacyScrubber reduce exposure to CCPA § 1798.150 private right of action lawsuits?
Under § 1798.150, consumers can recover $100 to $750 per consumer per incident if nonencrypted and nonredacted personal information is subject to unauthorized disclosure or exfiltration. By redacting and tokenizing PII locally before it enters external SaaS/LLM environments, raw consumer credentials are never exposed in downstream vendor breaches.
How does 1-click Reveal work for California customer support and legal teams?
When ChatGPT or Claude generates a response using synthetic tokens ([NAME_1], [ACCOUNT_1]), clicking 'Reveal' restores the original consumer details strictly inside local volatile RAM. Closing the tab immediately purges the session dictionary.

Zero-Trust Sanitization Verified

Technical safeguards supporting GDPR Art. 32, HIPAA & CCPA. All PII processing occurs locally in browser RAM.

Launch Free Workspace Teams Plan ($99/mo)