Does PrivacyScrubber send my data to any server?

No. Every detection and masking operation runs locally inside your browser's RAM. Zero bytes of your text, documents, or session tokens leave your device. Verify this yourself: open DevTools → Network tab, test our DLP speed benchmark , or disconnect from the internet entirely — our air-gapped local processing keeps working offline.

Which AI platforms does the browser extension support?

The PrivacyScrubber Chrome extension injects real-time PII masking directly inside ChatGPT, Claude, Gemini, Microsoft Copilot (Bing Chat), Grok, Perplexity, DeepSeek, Qwen, Kimi, and Zendesk. For coding agents and autonomous workflows, explore our AI Agents Protection guide, or use the web app at privacyscrubber.com to sanitize text before pasting it into any interface.

What does the free version include?

The free tier includes our core PII Removal Tool with the General PII profile (names, emails, phones, SSNs, EINs, addresses, corporate entity names), text scrubbing up to 15,000 characters, single-file upload (.txt, .docx), and PDF text extraction up to 3 pages. Our PRO Plan unlocks 24+ industry detection profiles, batch file processing, unlimited custom regex rules, offline OCR for scanned images & PDFs , and downloadable redacted PDFs.

Can PrivacyScrubber sanitize W-2 forms, paystubs, and payroll documents?

Yes. Our specialized financial PII profile natively detects Employer Identification Numbers (EIN/FEIN), payroll-format names (LASTNAME, FIRSTNAME), corporate employer names with legal suffixes (Inc, LLC, Corp), and US street addresses. All wage amounts, tax withholdings, hourly rates, and financial figures are preserved untouched — essential for loan underwriting and HR payroll compliance .

Can I get my original data back after the AI responds?

Yes. Paste the AI's response back into the tool and click Reveal. The 1-Click Reveal engine swaps every token ([NAME_1], [EMAIL_2], etc.) back to the original value using your volatile local session map — zero server round-trips, zero database storage.

Does this help with HIPAA, GDPR, or SOC 2 compliance?

PrivacyScrubber is designed to support de-identification under HIPAA Safe Harbor (45 CFR §164.514) for 18 PHI identifiers, GDPR Article 25/32 data minimization, and SOC 2 Type II controls by stripping identifiers in browser RAM before prompt submission. Review our Top 20 Corporate PII Guide and CISO AI Security Blueprint for detailed governance controls.

What is the CISO Procurement Memo and how do enterprise teams use it?

The CISO Procurement Memo is a standardized, copy-ready compliance document for enterprise IT, security architects, and procurement officers. It provides General Counsel, DPOs, and InfoSec committees with formal statutory evidence (GDPR Art. 4(8)/28, HIPAA 45 CFR § 164.502(e), CCPA § 1798.140) proving that because PrivacyScrubber runs 100% in local client RAM with 0 bytes transmitted to any server, third-party DPA/BAA contracts and lengthy vendor risk questionnaires (SIG/CAIQ) are legally non-applicable, enabling fast-track 0-day software approval.

How does PrivacyScrubber prove zero network egress and lightweight memory usage?

Every software build undergoes an automated 13-suite security and performance QA pipeline in continuous integration (CI). Automated headless network sniffers verify that during PII sanitization, exactly 0 HTTP, WebSocket, or background telemetry packets leave the browser. In-memory heap profiling enforces an ultra-lightweight ceiling under 6MB RAM (5.68 MB JS Heap) and sub-75ms streaming DOM mutation scans across 5,000 live nodes, ensuring zero laptop heating and zero CPU throttle. Review the full audit in our Technical Security Specifications .

What happens to the session map when I close the tab?

The session map exists exclusively in volatile browser RAM and is strictly isolated per tab. The moment you close the tab, reload the page, or navigate away, the entire mapping — including all original PII values and cryptographic keys — is permanently purged from memory. Read more in our Technical Security Architecture .

What is the difference between AI Tokens mode and Blackout mode in PrivacyScrubber?

AI Tokens mode replaces sensitive entities with structured badges like [NAME_1] and [EMAIL_1], preserving contextual roles for LLMs (ChatGPT, Claude) and allowing 1-click restoration via Reveal Originals. Blackout mode applies permanent, solid black raster bars over sensitive pixel coordinates, physically destroying vector text layers for court filings, legal discovery, and FOIA releases with zero underlying text leakage.

Why do standard PDF blackout tools leak data, and how does PrivacyScrubber prevent it?

Most conventional PDF editors and markup tools merely overlay black rectangles as a visual layer, leaving underlying OCR text, character coordinates, and metadata intact and extractable via Cmd+A copy or pdftotext. PrivacyScrubber executes true Secure Raster Flattening : pages are re-rendered in local RAM, PII coordinates are overwritten at the pixel level, and a fresh PDF is synthesized with zero underlying text layers, guaranteeing 100% leak-proof redactions.

What file formats can I sanitize, and what do I get back?

Supported formats include .txt, .docx, .pdf (text-layer and scanned images via Tesseract OCR), .xlsx, and .csv. With Batch File Redaction and Excel Spreadsheet Scrub , you can download sanitized files with PII removed or export redacted PDFs with permanent raster flattening (zero underlying text layers).

How does TEAMS encrypted session handoff work?

PrivacyScrubber TEAMS uses Argon2id key derivation and XChaCha20-Poly1305 authenticated encryption (via libsodium WASM). Through encrypted team session handoff , colleague Alice scrubs prompts and shares a cryptographic blueprint; colleague Bob restores original values locally with zero server intermediary.

How does Shadow DOM sandboxing protect against malicious scripts?

PrivacyScrubber wraps editor inputs and tokenized outputs inside closed Shadow DOM roots. This makes unredacted sensitive text completely inaccessible to DOM-scraping scripts, third-party analytics, or unauthorized browser extensions running on the host page. Learn more about our in-DOM prompt sandbox .

Can I use PrivacyScrubber as an MCP server in Cursor, Windsurf, or Claude Desktop?

Yes. The official @privacyscrubber/mcp-server package runs as a local stdio-based Model Context Protocol server for Cursor, Windsurf, Claude Desktop, and VS Code. It intercepts codebase prompts, sanitizes database passwords and API tokens in RAM, and protects your software development workflows with zero external calls.

Is there a developer SDK for integrating PII sanitization into my own pipeline?

Yes. The @privacyscrubber/sdk NPM package exposes the headless sanitization engine as a programmatic Node.js & ESM library. Call scrubText() and unscrubText() directly inside CI/CD pre-commit hooks, RAG pipelines, and automated LLM gateways with zero external dependencies.

Does changing the detection profile reset my session?

No. Switching between our 24+ industry profiles (e.g. from General to Legal & Contracts or Medical) preserves active tokens and session maps. Tokens remain restorable via Reveal until you click the Clear button explicitly.

How does PrivacyScrubber prevent data residue in system RAM?

After processing documents (PDF, DOCX, XLSX), the engine immediately overwrites all temporary ArrayBuffers at the byte level with zeroes (Uint8Array.fill(0)) before releasing them to garbage collection. Pair this with our tamper-evident audit receipts for verifiable forensic compliance.

Can enterprise or accounting teams pay via invoice or wire transfer?

Yes. For organizations requiring formal vendor onboarding, purchase orders (PO), or SWIFT/SEPA bank wire transfers, we provide custom invoicing with EU VAT reverse-charge support. Check our transparent pricing matrix or visit our Enterprise Solutions Hub .

Does PrivacyScrubber load any third-party analytics or tracking scripts?

No. The platform loads zero analytics trackers, third-party cookies, or fingerprinting scripts. Maintaining strict Content Security Policies (CSP) ensures third-party endpoints cannot inspect memory or DOM states. Review our full commitments in our Zero-Server Privacy Policy .

How are TEAMS admin roles managed without a backend?

There are no centralized accounts. Team administrators configure mandatory regex rules and compliance profiles locally in the Teams Deployment Hub , then generate a cryptographically signed Blueprint URL. When team members open this link, the configuration locks client-side without any backend database.

What rights does a Team Administrator have compared to Managed Team Members in TEAMS?

The purchaser acts as the Team Administrator with exclusive authority to configure organization-wide custom Regex rules, corporate token taxonomy (e.g. [PATIENT_ID]), and default compliance profiles in the Teams Dashboard . When the Admin exports a cryptographically signed Blueprint with Lock Rules enabled, Managed Team Members receive a locked, read-only configuration across their Web App and Chrome Extension (badged as 🔒 Enterprise), preventing employees from altering or bypassing corporate DLP policies.

What is the difference between Custom Regex Rules and Token Labels?

Our Custom Regex Rules Engine discovers proprietary data formats (custom ticket IDs, project codes like PROJ-1234, internal server URLs). Token Labels, in contrast, customize the replacement placeholder (e.g. renaming [NAME] to [PATIENT_ID]) to give LLMs optimal domain context without modifying regex patterns.

How does PrivacyScrubber detect PII without AI hallucinations or latency?

PrivacyScrubber utilizes a high-performance deterministic pattern matching engine running natively in browser RAM (sub-2ms execution time). Unlike cloud LLM-based redaction which can hallucinate, omit tokens, or introduce network latency, our deterministic parser guarantees 100% reproducible tokenization across 18 core Safe Harbor/GDPR entity types (names, emails, phones, SSNs, credit cards, IBANs, medical MRNs, API tokens). PRO users can also inject custom regex rules or run local offline OCR for documents.

How does license key custody, non-transferability, and emergency revocation work without user tracking?

Because PrivacyScrubber maintains a Zero-Trust Data Sanitization (ZTDS) architecture with zero server databases and zero phone-home user tracking, license custody is sovereign to the purchaser. All license tiers are strictly non-transferable. If a key is accidentally leaked or exposed, the billing owner can immediately request emergency revocation via support@privacyscrubber.com. We append the SHA-256 hash of the compromised key to our global Key Revocation List (KRL), instantly invalidating it across all client instances within 24 hours while reissuing a secure replacement.

What are the exact operational boundaries between Personal PRO, Team Workspace, and Developer SDK licenses?

PRO ($15/mo or $110 Lifetime) is a single-user personal license valid on up to 3 personal devices (Web, Chrome, IDE MCP). TEAMS ($99/mo flat) is an organization-wide internal workspace covering unlimited internal staff with Master Key Isolation. The Developer SDK ($299/mo) covers headless execution across unlimited internal backend nodes, microservices, ETL pipelines, and internal RAG vector databases. Embedding into customer-facing commercial SaaS for third-party resale requires an OEM/Enterprise contract.

Is the PrivacyScrubber MCP Server completely air-gapped and zero-network?

Yes. The @privacyscrubber/mcp-server package executes strictly in local machine memory over standard stdio JSON-RPC transport. It makes zero outbound network requests, transmits zero telemetry, and performs all PII sanitization and token mapping exclusively in your local volatile RAM, satisfying stringent IDE security policies across Cursor, Windsurf, and Claude Desktop.

Zero-Trust Client-Side vs. Cloud APIs.

AI Summary / Key Takeaways

Verified Zero-Trust Logic

"Architectural comparison between zero-trust client-side sanitization and legacy cloud DLP APIs. PrivacyScrubber eliminates the transmission risk inherent in cloud-based scrubbers by redacting data locally, ensuring absolute data sovereignty and superior network performance with zero latency."

Zero-Server Airplane Mode No Server Logs

Zero-Trust Client-Side vs. Cloud APIs. Dashboard — Enterprise Grade · Local Execution ZTDS

Live Turnkey Simulator · ZTDS Engine

Interactive PII Detection & Sanitization Sandbox

Test real-time client-side RAM tokenization. Choose a specialized preset or paste your own raw prompt to test instant reversible redaction.

0 Bytes Server Egress

<1.8ms Latency

Select Industry Test Payload: Preset: Comparisons

Raw Input Payload

0 chars

RAM-Only Isolated Session

Sanitized Output

Click any token above to toggle single-token reveal ✓ Restored

Automated Detection Classes:

USER_NAME Email Addresses User / Server IP Addresses SESSION_ID QUERY_TEXT

Open in Full Workspace

Client-side processing eliminates third-party trust risk.

Zero network latency: Redaction happens at local CPU speed.

Complete data sovereignty: Data never leaves your device.

Airplane Mode Verified: Physical proof of zero-server logic.

Enterprise-Grade AI Privacy

Add custom redaction rules and priority support with PRO.

GO PRO

Zero-Trust GRC Checklist

GDPR: 100% local processing. Zero EEA egress.

HIPAA: Removes 18 PHI parameters.

SOC 2: Zero third-party cloud routing.

Billing: Flat-rate Teams ($99/mo).

Verified by the Enterprise Board

Our 10-persona AI team ensures Comparison compliance at every layer.

Chief Information Security Officer

Security Lead

"PrivacyScrubber eliminates Shadow AI risk by intercepting PII at the edge. We've mapped this hub to SOC 2 Type II and ISO 27001 masking controls."

Data Protection Officer & Legal Counsel

Legal Counsel

"Under GDPR Article 32 and HIPAA Safe Harbor, local anonymization removes the AI provider from the 'Data Processor' chain, negating complex DPA liabilities."

Financial Audit & Compliance Lead

Financial Audit

"A single GLBA or PCI-DSS violation costs 100x more than a site-wide license. We provide verifiable ROI through data loss prevention at the prompt level."

The Comparison AI Privacy Gap

Data Persistence

Raw sensitive inputs are often stored by AI vendors for model training.

Compliance Liability

Uploading unredacted PII violates industry-specific global privacy mandates.

Shadow AI Risk

Employees using unvetted AI tools create invisible data leakage vectors.

Raw Input: Client: Johnson & Associates, Account ID: ACCT-9914, Phone: (555) 234-5678

Sanitized: Client: [COMPANY_1], Account ID: [ID_1], Phone: [PHONE_1]

ZERO-TRUST BRIDGE ACTIVE

Secure Comparison AI Workflow

Enable high-performance AI without client data leaving your machine

Import Files

Upload documents locally into the PrivacyScrubber sandbox.

Local Masking

Identify and tokenize sensitive strings entirely within browser memory.

Analyze with AI

Submit sanitized prompts to ChatGPT or Claude for processing.

Reverse Scrub

Restore original values into the AI response locally for the final draft.

Protocol: The 5-Step Airplane Mode Audit

Don't trust us. Trust the laws of physics. Follow this audit procedure to verify zero-server PII sanitization for Comparison workflows.

Load the tool: Open PrivacyScrubber.com in your browser.

Go Offline: Disconnect your WiFi or enable Airplane Mode. The site remains fully functional.

Process Data: Paste a sensitive comparison document and run the scrubber.

Inspect Network: Open Developer Tools (F12) and check the 'Network' tab. Verify 0 requests were made.

Verify Local RAM: All comparison identifiers stay in your transient browser memory—never stored, never logged.

Relevance-Mapped Industry Profile

Named Entity (NER) General Profile: Detection Coverage

Universal Named Entity Recognition ruleset. Detects names, government IDs, bank accounts, project codenames, and geographic locations across unstructured text.

24+ Industry Profiles Active in Web, Extension & MCP

Top 6 Comparisons Sensitive Entity Types Detected & Scrubbed

Automated Local Tokenization

[PERSON_NAME] Critical (Personal Identity)

Individual Full Name

Transform: Mark Miller → [NAME_1]

[ID_NUMBER] Critical (Regulatory PII)

Government SSN / Tax ID

Transform: 999-12-4482 → [ID_1]

[ACCOUNT_ID] Critical (Financial PII)

Bank IBAN & Account Ref

Transform: CH-8821-9901 → [ID_2]

[PROJECT_CODE] High (IP Leak)

Proprietary Project Codename

Transform: PROJECT NEBULA-X → [PROJECT_1]

[LOCATION_NAME] Medium (Location)

Geographic Location

Transform: Geneva Headquarters → [LOCATION_1]

[MONEY_VALUE] High (Value Exposure)

Financial Balance Amount

Transform: $1,450,000 → [VALUE_1]

Continuous Detection Engine Expansion & Custom Regex Sovereignty

The 6 entity types above represent the core detection baseline for Comparisons. Our zero-trust engine detects hundreds of additional data classes and is continuously updated with new heuristic patterns, shadow AI leak vectors, and custom regulatory rulesets. Need proprietary database IDs or internal project codenames masked? PRO and TEAMS users can define unlimited custom regular expressions running 100% locally in browser RAM.

Explore PII Scanner

Engine Workflow

How the PrivacyScrubber Engine Solves This

Interactive Tool Controls for Comparisons. Hover for specs.

0ms Client-Side vs Cloud DLP

Eliminate the 2-5 second latency and data interception risks of cloud-based DLP proxies by tokenizing 100% in local browser RAM.

Technical Audit Data

Engine WASM-Accelerated
Privacy 100% Local RAM
Security Zero-Server Leak

Verifiable Airplane Mode

Disconnect Wi-Fi or inspect DevTools Network tab to prove zero outbound network calls are made during text and document sanitization.

Technical Audit Data

Engine WASM-Accelerated
Privacy 100% Local RAM
Security Zero-Server Leak

Predictable Flat-Rate Pricing

Replace predatory per-user enterprise seat pricing ($50+/user) with flat-rate TEAMS ($99/mo) for the entire organization.

Technical Audit Data

Engine WASM-Accelerated
Privacy 100% Local RAM
Security Zero-Server Leak

Comparisons Compliance Library

Step-by-step redaction workflows for Comparisons environments.

Core Capabilities	Free Web Only	PRO $15/mo or $110 Lifetime	TEAMS $99/mo	ENTERPRISE Custom Tier
100% Local Processing (Airplane Mode)
Text Paste & Single File Docs	Max 5k chars	UNLIMITED	UNLIMITED	UNLIMITED
Batch Processing & Background OCR	—
Custom Regex & Specific Redaction Rules	—
Chrome Extension Native App	—
Silent Corporate Deployment (MDM)	—	—
Policy Control Center & Enforcement	—	—
On-Premise Source Code License	—	—	—
100% Air-Gapped Operation	—	—	—
Dedicated GRC Support	—	—	—
Includes guaranteed no server logs for all tiers. 100% Client-Side.	Try Free	Details	Deploy TEAMS	Enterprise Hub

Zero-Trust Client-Side vs. Cloud APIs.

AI Summary / Key Takeaways

Interactive PII Detection & Sanitization Sandbox

Verified by the Enterprise Board

The Comparison AI Privacy Gap

Data Persistence

Compliance Liability

Shadow AI Risk

Secure Comparison AI Workflow

Import Files

Local Masking

Analyze with AI

Reverse Scrub

Protocol: The 5-Step Airplane Mode Audit

Named Entity (NER) General Profile: Detection Coverage

Top 6 Comparisons Sensitive Entity Types Detected & Scrubbed

Individual Full Name

Government SSN / Tax ID

Bank IBAN & Account Ref

Proprietary Project Codename

Geographic Location

Financial Balance Amount

Continuous Detection Engine Expansion & Custom Regex Sovereignty

How the PrivacyScrubber Engine Solves This

0ms Client-Side vs Cloud DLP

Verifiable Airplane Mode

Predictable Flat-Rate Pricing

Comparisons Compliance Library

PrivacyScrubber vs ChatGPT

Secure Workspace vs Browser Extension for AI Privacy

ChatGPT Privacy Settings Explained

Claude Code Privacy Guide

Google Gemini Data Privacy and Masking

Top 10 Privacy Focused AI Tools in 2026

Best Tool to Protect & Secure PII for LLMs

PrivacyScrubber vs Nightfall AI

PrivacyScrubber vs Microsoft Purview AI Hub

Local vs Cloud PII Masking Workspace

Open Source PII Masking Workspaces vs PrivacyScrubber

Top 10 AI Privacy Tools & Scrubber Alternatives (2026 Comparison)

PrivacyScrubber vs Amazon Macie for AI Prompts

PrivacyScrubber vs Google Cloud DLP

PrivacyScrubber vs Microsoft Presidio

ChatGPT Enterprise vs Local PII Masking Workspace

Claude for Work vs PrivacyScrubber (Zero-Trust PII Comparison)

PrivacyScrubber vs AWS Comprehend Medical

PrivacyScrubber vs. Enterprise Cloud DLP

Zero-Trust vs. Server-Side Data Masking

ChatGPT Enterprise Data Controls vs. Client-Side Sanitization

PrivacyScrubber vs OpenAI Privacy Filter

Synthetic Data vs Tokenization

Best ChatGPT Privacy Extensions Compared (2026)

Is Claude AI Safe? Anthropic's Data Policy Explained (2026)

Microsoft 365 Copilot Data Privacy

Nightfall AI vs PrivacyScrubber (Local vs Cloud DLP)

Microsoft Presidio Alternative for Browser-Based Redaction

Skyflow Alternative

Lakera Guard Alternative

Cyberhaven Alternative

Compare Edition Features

Comparison Technical Compliance Library

Frequently Asked Questions

Zero-Trust Sanitization Verified

Encrypted Prompt Handoff & Fleet Governance

Save Output Package

Blueprint Generated

Add to Device Home Screen