Zero-Trust Data Sanitization

1-Click Data Recovery: Reverse Scrubbing

Rehydrate AI Responses Locally

100% Local RAM Airplane Mode 0 Bytes Egress
Free to start · $0 Free / $99/mo Teams
Reverse Reveal Token Mapping

AI Summary / Key Takeaways

Verified Zero-Trust Logic

"Restore original identities from anonymized LLM responses in volatile RAM. Conforms to ZTDS™ Invariant 2 for reversible tokenization without egress."

Paste AI Response: Copy the output from ChatGPT or Claude. The engine handles altered tokens (different casing, missing brackets) automatically using a loose alias mapping.
Translate Tokens: The local engine scans the response using multilingual aliases to match the tokens back to your encrypted browser session memory.
Restore Real Data: Original values are swapped back instantly. Document structures are reconstructed directly in your browser, restoring real data while preserving original layouts.

Enterprise-Grade AI Privacy

Add custom redaction rules and priority support with PRO.

GO PRO
Live Turnkey Simulator · ZTDS Engine

Interactive PII Detection & Sanitization Sandbox

Test real-time client-side RAM tokenization. Choose a specialized preset or paste your own raw prompt to test instant reversible redaction.

Protected in 1-Click Data Recovery (Reveal): CustomerSSNPhone NumbersEmail AddressesPANAPI Access Keys
0 Bytes Server Egress
<1.8ms Latency
Select Industry Test Payload:
Raw Input Payload
0 chars
RAM-Only Isolated Session
1-Click Safe AI Launch:
Automated Detection Classes:
Customer / Employee NamesSSNPhone NumbersEmail AddressesCredit Card Numbers (PAN)API Access Keys / TokensPhysical AddressesInternal Server Hostnames
Enterprise Challenge

The Challenge with AI Data Workflows

Redacting PII manually breaks productivity because you receive AI answers stripped of context. Re-typing [CLIENT_1] to their real name across a 50-page contract destroys efficiency. Without automated local de-tokenization, privacy tools are simply too tedious for daily enterprise use.

Zero-Egress Data Protection
Eliminates corporate data leaks before prompts hit external AI models.
Zero-Trust Resolution

How It Works

1

Paste AI Response

Copy the output from ChatGPT or Claude. The engine handles altered tokens (different casing, missing brackets) automatically using a loose alias mapping.

2

Translate Tokens

The local engine scans the response using multilingual aliases to match the tokens back to your encrypted browser session memory.

3

Restore Real Data

Original values are swapped back instantly. Document structures are reconstructed directly in your browser, restoring real data while preserving original layouts.

Supported Formats & Limitations

Supported Formats

AI Text OutputMasked StringsJSON Responses

System Limitations

  • Session memory is intentionally volatile and purges instantly on tab refresh
  • Requires the exact same session map generated during the initial scrub
  • Cannot reveal tokens generated in a different, disconnected browser session without Team Handoff
ZTDS™ Standard ConformanceInvariant 2: Deterministic Reversible Tokenization

Under the Zero-Trust Data Sanitization (ZTDS™) open standard, client sanitization must maintain semantic context for LLMs without exposing de-identification keys to third-party networks. PrivacyScrubber's Reveal architecture implements Invariant 2 by isolating cryptographic token maps in volatile browser RAM, executing sub-millisecond reverse restoration locally with zero external network egress.

How Reveal Works: The Token Lifecycle

The Reveal feature closes the AI workflow loop. When you scrub text, every sensitive value is replaced with a deterministic token — [NAME_1], [EMAIL_2], [PHONE_1]. The original values are encrypted using AES-GCM-256 via the Web Crypto API and stored in your tab's volatile RAM as a token dictionary. Reveal reads that map and substitutes tokens back with originals.

Session Scoping and Tab Isolation

Every browser tab gets a unique tabId generated at page load. All token dictionary keys are prefixed with this ID — e.g., tab_x7k2_NAME_1. This means:

  • Two separate PrivacyScrubber tabs cannot read each other's sessions.
  • Closing the tab purges the entire map from RAM instantly.
  • The page refresh also clears all tokens — there is no persistence to disk, localStorage, or local encrypted browser storage.

Alias Matching: Handling LLM Token Mutations

AI models sometimes alter the token format in their responses. ChatGPT might write NAME_1 without brackets, or [name_1] in lowercase. The Reveal engine applies a loose alias pass before the strict match:

AI Output FormatMatched As
[NAME_1]Exact match
NAME_1Alias: brackets stripped
[name_1]Alias: lowercased
[NAME 1]Alias: underscore→space
Name_1Alias: mixed case

Using Reveal: Secure Workspace vs Chrome Extension

Secure Workspace Workflow

  1. Scrub your text using the Smart PII Scanner. Copy the tokenized output.
  2. Paste the tokenized text into ChatGPT, Claude, Gemini, or any AI tool. The AI sees tokens only — never your real PII.
  3. Copy the AI's response (which still contains tokens like [NAME_1]).
  4. Return to PrivacyScrubber. Click the Reveal tab in the output section.
  5. Paste the AI response. Click Reveal Original Text. All tokens are replaced with originals in under 10ms.

Chrome Extension Workflow

The extension popup has two tabs: Protect and Reveal. After scrubbing in the Protect tab, the token map is stored in chrome.storage.session — shared across all extension popups in the same browser session.

  1. Press Alt+Shift+P to open the popup. Scrub your text in the Protect tab.
  2. On the AI platform (ChatGPT, Claude, etc.), paste the tokenized text and get a response.
  3. Copy the AI response. Open the popup again. Switch to the Reveal tab.
  4. Paste the AI response and click Restore. Tokens are replaced in-memory and the de-tokenized text is displayed ready to copy.

Why Reveal Matters for AI Productivity

Without Reveal, every AI workflow ends with manual "find-and-replace" — hunting through the original document to figure out who [NAME_1] was. Reveal eliminates that entirely.

This is especially powerful for HR blind screening workflows: scrub 50 resumes, ask the AI to rank them by skills, then Reveal reveals the actual candidate names behind the top-ranked tokens.

For teams that need to share session state across colleagues — where Alice scrubs the data and Bob needs to reveal the AI response — see the TEAMS session handoff feature in the Chrome extension.

Browser Extension Parity

Data Revealing is fully supported in the Browser Extension. Scrub in ChatGPT, receive the answer, and reveal directly inside the popup—all without disrupting your workflow.

Client-Side ZTDS™ Execution & Conformance Verification

All PII detection and deterministic tokenization execute 100% inside local client memory — eliminating cloud proxies, external subprocessors, and network data egress.

100% Local RAM Airplane Mode Verified IETF RFC Draft
ZTDS™ Verified
ZTDS-CERT-2026-PRIVACYSCRUBBER-WEB-D02DC6
ZTDS™ RFC v1.0 Verified Capability·ZTDS-CERT-2026-PRIVACYSCRUBBER-WEB-D02DC6
Verify Cryptographic Seal

Frequently Asked Questions

Technical Details & Privacy Architecture

Is the token dictionary saved anywhere permanently?
No. The token dictionary exists exclusively in your browser tab's volatile RAM. It is scoped per tab using a unique tabId prefix, so other tabs cannot access it. Closing or refreshing the tab purges it instantly — it is never written to localStorage, cookies, local encrypted browser storage, or any server.
What if the AI changes the token format?
The Reveal engine uses loose alias matching. If ChatGPT writes 'NAME_1' instead of '[NAME_1]', or drops the underscore, the engine still matches it. It checks both the canonical format and common LLM mutations before giving up.
Can I reveal tokens across multiple AI responses in one session?
Yes. The token dictionary persists across all Reveal operations within the same tab session. You can send five separate scrubbed prompts to ChatGPT, receive five responses, and paste them all back one by one — every token restores correctly.
Does the Chrome extension support Reveal?
Yes. The extension popup has a dedicated Reveal tab. After scrubbing in the popup, paste the AI response into the Reveal input and click Restore. The token map in the extension is stored in chrome.storage.session — scoped to the browser session, not a specific tab.
What happens if I close the tab before revealing?
The token dictionary is purged. This is by design — it enforces the zero-persistence guarantee. If you need to maintain a session across reloads, use the TEAMS feature which encrypts a session handoff package using XChaCha20-Poly1305 that can be decrypted by another authorized browser.
Is Reveal available on the free tier?
Yes. Reverse scrubbing (Reveal) is fully available on the free tier for text-based sessions. The Chrome extension Reveal tab is also included in the free extension install.
100% Zero-Trust Deployment

Protect Your Team's AI Prompts in Under 30 Seconds

No server uploads. No account required. 100% offline in your browser's local RAM.