Zero-Trust Data Sanitization

1-Click Data Recovery: Reverse Scrubbing

Rehydrate AI Responses Locally

100% Local RAM Processing
Trusted by 10,000+ teams & engineers · $0 Free / $99/mo Teams
Airplane Mode Verified
0 Bytes Server Egress
Reverse Reveal Token Mapping

AI Summary / Key Takeaways

Verified Zero-Trust Logic

"Maintain complete context without exposing data. Once ChatGPT or Claude generates a response using anonymized tokens (e.g., [NAME_1]), paste it back into PrivacyScrubber. Our engine uses the local RAM session map to instantly swap the tokens back to their original values. Available in Site Workspace and Extension popup."

Is the SessionMap saved anywhere permanently?
What if the AI changes the token format?
Can I reveal tokens across multiple AI responses in one session?

Enterprise-Grade AI Privacy

Add custom redaction rules and priority support with PRO.

GO PRO
Live Turnkey Simulator · ZTDS Engine

Interactive PII Detection & Sanitization Sandbox

Test real-time client-side RAM tokenization. Choose a specialized preset or paste your own raw prompt to test instant reversible redaction.

0 Bytes Server Egress
<1.8ms Latency
Select Industry Test Payload:
Raw Input Payload
0 chars
RAM-Only Isolated Session
Sanitized Output
Click any token above to toggle single-token reveal ✓ Restored
Automated Detection Classes:
Customer / Employee NamesSSNPhone NumbersEmail AddressesCredit Card Numbers (PAN)API Access Keys / TokensPhysical AddressesInternal Server Hostnames
Enterprise Challenge

The Challenge with AI Data Workflows

Redacting PII manually breaks productivity because you receive AI answers stripped of context. Re-typing [CLIENT_1] to their real name across a 50-page contract destroys efficiency. Without automated local de-tokenization, privacy tools are simply too tedious for daily enterprise use.

Zero-Trust Resolution

How It Works

1

Paste AI Response

Copy the output from ChatGPT or Claude. The engine handles altered tokens (different casing, missing brackets) automatically using a loose alias mapping.

2

Translate Tokens

The local engine scans the response using multilingual aliases to match the tokens back to your encrypted browser session memory.

3

Restore Real Data

Original values are swapped back instantly. Document structures are reconstructed directly in your browser, restoring real data while preserving original layouts.

Customer Proof

What Teams Achieve with Local PII Masking

"Reverse scrubbing is the 'killer feature'. I can generate 50 personalized emails in ChatGPT using tokens, and then instantly get the real names back in one click. Saved me hours of copying and pasting."

D

David R., Marketing Lead

Verified User

"We use this for drafting case responses. The AI sees the issue but not the customer IDs. When I paste it back here, the IDs appear like magic. It feels like I have a superpower."

E

Elena M., Customer Support

Verified User

"The local mapping ensures our client identities never touch the cloud, but I can still get perfectly formatted contracts back with the real names included."

J

James W., Legal Associate

Verified User

Swipe to read verified reviews

Supported Formats & Limitations

Supported Formats

AI Text OutputMasked StringsJSON Responses

System Limitations

  • Session memory is intentionally volatile and purges instantly on tab refresh
  • Requires the exact same session map generated during the initial scrub
  • Cannot reveal tokens generated in a different, disconnected browser session without Team Handoff

How Reveal Works: The Token Lifecycle

The Reveal feature closes the AI workflow loop. When you scrub text, every sensitive value is replaced with a deterministic token — [NAME_1], [EMAIL_2], [PHONE_1]. The original values are encrypted using AES-GCM-256 via the Web Crypto API and stored in your tab's volatile RAM as a sessionMap. Reveal reads that map and substitutes tokens back with originals.

Session Scoping and Tab Isolation

Every browser tab gets a unique tabId generated at page load. All sessionMap keys are prefixed with this ID — e.g., tab_x7k2_NAME_1. This means:

  • Two separate PrivacyScrubber tabs cannot read each other's sessions.
  • Closing the tab purges the entire map from RAM instantly.
  • The page refresh also clears all tokens — there is no persistence to disk, localStorage, or IndexedDB.

Alias Matching: Handling LLM Token Mutations

AI models sometimes alter the token format in their responses. ChatGPT might write NAME_1 without brackets, or [name_1] in lowercase. The Reveal engine applies a loose alias pass before the strict match:

AI Output FormatMatched As
[NAME_1]Exact match
NAME_1Alias: brackets stripped
[name_1]Alias: lowercased
[NAME 1]Alias: underscore→space
Name_1Alias: mixed case

Using Reveal: Secure Workspace vs Chrome Extension

Secure Workspace Workflow

  1. Scrub your text using the Smart PII Scanner. Copy the tokenized output.
  2. Paste the tokenized text into ChatGPT, Claude, Gemini, or any AI tool. The AI sees tokens only — never your real PII.
  3. Copy the AI's response (which still contains tokens like [NAME_1]).
  4. Return to PrivacyScrubber. Click the Reveal tab in the output section.
  5. Paste the AI response. Click Reveal Original Text. All tokens are replaced with originals in under 10ms.

Chrome Extension Workflow

The extension popup has two tabs: Protect and Reveal. After scrubbing in the Protect tab, the token map is stored in chrome.storage.session — shared across all extension popups in the same browser session.

  1. Press Alt+Shift+P to open the popup. Scrub your text in the Protect tab.
  2. On the AI platform (ChatGPT, Claude, etc.), paste the tokenized text and get a response.
  3. Copy the AI response. Open the popup again. Switch to the Reveal tab.
  4. Paste the AI response and click Restore. Tokens are replaced in-memory and the de-tokenized text is displayed ready to copy.

Why Reveal Matters for AI Productivity

Without Reveal, every AI workflow ends with manual "find-and-replace" — hunting through the original document to figure out who [NAME_1] was. Reveal eliminates that entirely.

This is especially powerful for HR blind screening workflows: scrub 50 resumes, ask the AI to rank them by skills, then Reveal reveals the actual candidate names behind the top-ranked tokens.

For teams that need to share session state across colleagues — where Alice scrubs the data and Bob needs to reveal the AI response — see the TEAMS session handoff feature in the Chrome extension.

Browser Extension Parity

Data Revealing is fully supported in the Browser Extension. Scrub in ChatGPT, receive the answer, and reveal directly inside the popup—all without disrupting your workflow.

Client-Side Reliability & Audit Verification

Powered by the Zero-Trust Sanitization Engine (ZTDS). All detection, tokenization, and regex evaluation execute 100% inside your local client process boundary — eliminating cloud proxies, intermediate servers, and third-party data retention risks.

100% Local Execution RAM-Only (Zero Disk I/O) Zero Outbound Telemetry
Airplane Mode
Zero Network Dependency

Step-by-Step Guide

How to use this feature

3 min total
1

Scrub your text first

Paste text into PrivacyScrubber and click Scrub. Your token-to-original map is stored in browser session memory for this active tab.

2

Send scrubbed text to AI

Copy the tokenized output (e.g., 'Dear [NAME_1], your order [ID_1] is ready') and paste it into ChatGPT, Claude, or any AI tool.

3

Get the AI response

The AI responds using only the tokens — no real names, emails, or IDs ever leave your machine.

4

Paste AI response back

Copy the AI response. Return to PrivacyScrubber and paste it into the Reveal input field.

5

Click Reveal

Click the Reveal button. All [TOKEN_N] placeholders are replaced with original values. Your session stays active, allowing you to continue the AI conversation and reveal further replies indefinitely.

What you need: Scrubbed text with PII tokens (e.g. [NAME_1]) AI-generated response text using those tokens

Frequently Asked Questions

Is the SessionMap saved anywhere permanently?

No. The sessionMap exists exclusively in your browser tab's volatile RAM. It is scoped per tab using a unique tabId prefix, so other tabs cannot access it. Closing or refreshing the tab purges it instantly — it is never written to localStorage, cookies, IndexedDB, or any server.

What if the AI changes the token format?

The Reveal engine uses loose alias matching. If ChatGPT writes 'NAME_1' instead of '[NAME_1]', or drops the underscore, the engine still matches it. It checks both the canonical format and common LLM mutations before giving up.

Can I reveal tokens across multiple AI responses in one session?

Yes. The sessionMap persists across all Reveal operations within the same tab session. You can send five separate scrubbed prompts to ChatGPT, receive five responses, and paste them all back one by one — every token restores correctly.

Does the Chrome extension support Reveal?

Yes. The extension popup has a dedicated Reveal tab. After scrubbing in the popup, paste the AI response into the Reveal input and click Restore. The token map in the extension is stored in chrome.storage.session — scoped to the browser session, not a specific tab.

What happens if I close the tab before revealing?

The sessionMap is purged. This is by design — it enforces the zero-persistence guarantee. If you need to maintain a session across reloads, use the TEAMS feature which encrypts a session handoff package using XChaCha20-Poly1305 that can be decrypted by another authorized browser.

Is Reveal available on the free tier?

Yes. Reverse scrubbing (Reveal) is fully available on the free tier for text-based sessions. The Chrome extension Reveal tab is also included in the free extension install.

100% Zero-Trust Deployment

Protect Your Team's AI Prompts in Under 30 Seconds

No server uploads. No account required. 100% offline in your browser's local RAM.

Support
Sanitize Files
Mask AI Prompt