Legal & Technical Disclaimer
PrivacyScrubber is an algorithmic client-side software utility designed to assist users in transforming sensitive identifiers prior to external AI transmission. The software, documentation, and website content do not constitute formal legal counsel or an absolute regulatory shield.
Algorithmic transformation tool
Zero server-side liability
Pre-prompt inspection duty
Consult your qualified DPO
Algorithmic Software Utility, Not Legal Representation
Software mechanics and informational boundaries.
The information provided across privacyscrubber.com, in our documentation, whitepapers, guides, and within the PrivacyScrubber software itself (Web Workspace, Chrome Extension, MCP Server, and SDK), is distributed strictly for general informational, technical, and workflow optimization purposes.
Neither PrivacyScrubber nor BrandMeWeb acts as your attorney, compliance officer, or Data Protection Officer (DPO). Nothing on this site or within the software output creates an attorney-client relationship, nor does it constitute formal legal advice regarding local data protection statutes (e.g., GDPR, CCPA/CPRA, HIPAA, GLBA, or the EU AI Act).
Pre-Dispatch Audit Duty & Pattern Boundaries
User responsibility for prompt inspection.
PrivacyScrubber executes 100% locally on your endpoint workstation using deterministic ZTDS™ sanitization profiles and contextual heuristic parsers across 30 specialized industry profiles. While engineered for maximal recall and precision:
- Edge Case Limitations: Non-standard text layouts, deliberate obfuscation, typos, exotic cryptographic hashes, or unstructured proprietary identifiers may occasionally escape automated regex patterns.
- Final User Review Duty: You remain solely responsible for visually inspecting and confirming the sanitized text before sending or pasting prompts into third-party AI models (e.g., OpenAI ChatGPT, Anthropic Claude, Google Gemini, DeepSeek).
- Custom Regex Rule Tuning: Organizations with custom internal employee IDs or unique data patterns are expected to define custom regular expression rules via PRO/TEAMS configurations to ensure full coverage.
Regulatory Compliance & Audit Exemption Boundaries
Facilitating compliance vs statutory certification.
Our Zero-Trust Data Sanitization (ZTDS) architecture facilitates organizational compliance with GDPR Article 28, HIPAA BAA waivers, and SOC 2 Trust Services Criteria by eliminating third-party vendor data transmission entirely.
However, the deployment of PrivacyScrubber does not automatically certify that your entire enterprise infrastructure, employee workflows, or downstream AI usage are compliant with applicable laws. Organizations must conduct their own internal Data Protection Impact Assessments (DPIAs) and consult qualified legal counsel.
Independent Third-Party AI Model Boundaries
Separation from external LLM providers.
PrivacyScrubber is an independent cybersecurity software product. PrivacyScrubber and BrandMeWeb are not affiliated with, endorsed by, or sponsored by OpenAI, Anthropic, Google, Microsoft, DeepSeek, or any other third-party LLM provider.
All interactions with external AI providers remain subject to the respective terms of service, acceptable use policies, and privacy notices of those third-party services.
Multi-Vertical Statutory Non-Reliance & Computational Demarcation
Strict legal insulation across regulated professional disciplines.
PrivacyScrubber operates strictly as a local computational transformation utility executing ZTDS™ pattern matching, local tokenization, and volatile memory substitution. The software, documentation, and presets do not constitute legal, medical, financial, accounting, tax, national security, or statutory compliance advice under any jurisdiction.
Adherence to sector-specific statutes—including but not limited to HIPAA (45 CFR § 164.514), FRE 502, ABA Model Rule 1.6, GLBA (15 U.S.C. § 6801), SEC Rules 17a-4 / Reg S-P, PCI DSS v4.0.1, IRS Circular 230, Bank Secrecy Act / FinCEN SAR anti-tipping mandates (31 U.S.C. § 5318(g)(2)), EEOC Title VII, NYC Local Law 144, ITAR (22 CFR § 120.54), EAR (15 CFR § 734.18), CMMC 2.0 / CJIS, SEC Form 8-K cyber reporting, GDPR Article 33/34, FERPA (34 CFR Part 99), and EU AI Act (Regulation 2024/1689)—remains the non-delegable sole responsibility of the end user and licensed entity.
For formal normative definitions and the statutory demarcation schedule, refer to the authoritative specification: ZTDS Multi-Vertical Statutory Insulation Specification.
High-Risk Sectoral Processing Affirmations & Exclusions
Voluntary execution, zero escrow, and local token map liability.
PrivacyScrubber never holds, escrows, archives, or transmits private token maps, seed values, or raw inputs. Reversible token mappings are ephemeral, residing solely in volatile client RAM or client-persisted encrypted containers. The user acknowledges that the loss, corruption, or improper handling of local cryptographic mappings, as well as downstream prompts sent to unvetted LLM providers, is entirely outside the control of PrivacyScrubber and BrandMeWeb.
No business associate agreement (BAA), financial fiduciary engagement, attorney-client relationship, or defense contracting custody is created by downloading, compiling, or executing this software.
