Is PrivacyScrubber a local or cloud PII scrubber?

PrivacyScrubber is a 100% local, browser-based PII scrubber. Unlike cloud DLP solutions, it performs enterprise-grade PII and PHI scrubbing entirely in your browser's RAM, ensuring zero-trust data sanitization for texts and documents (PDFs, DOCX, CSV) without ever sending data to an external server.

Does PrivacyScrubber send my data to any server?

No. Zero bytes of your input are ever transmitted to any external server. The entire PII detection engine runs inside your browser's JavaScript runtime using local RAM. You can verify this by opening Chrome DevTools → Network tab and clicking "Protect PII" — you will see zero outbound requests.

What happens to the session map when I close the browser?

The session map is stored exclusively in volatile browser RAM. The moment you close the tab, reload the page, or navigate away, the entire mapping — including all original PII values — is permanently destroyed.

Do I need a HIPAA BAA or GDPR DPA with PrivacyScrubber?

No. Because PrivacyScrubber never acts as a data processor (your data never reaches our infrastructure), we are architecturally exempt from BAA and DPA requirements. Your browser processes everything locally.

What is the difference between the Free and PRO tiers?

The Free tier supports text paste and single .txt/.docx file upload. The PRO plan ($110 lifetime) adds offline PDF/OCR scanning, batch file processing, and Custom Regex Rules for internal domain-specific codes.

Does PrivacyScrubber remove PII from uploaded documents, and what is the output format?

Yes. PrivacyScrubber detects and scrubs PII from local documents (.txt, .docx, .pdf, .xlsx, .csv, and images). You can download the output either as a fully sanitized, anonymized document (retaining its original file extension and structure) or copy the processed text stream directly to your clipboard.

How does the TEAMS encrypted session sharing work?

PrivacyScrubber generates an AES-GCM encrypted link locally. Your colleague can paste the AI's response and use your shared, encrypted key to safely 'reveal' the original data on their machine — no database or server involved.

How does closed Shadow DOM sandboxing protect my data from malicious scripts?

PrivacyScrubber encloses both your editor input (#inputText) and the highlighted token output within isolated, closed Shadow DOM roots. This makes the raw, unredacted text completely inaccessible to any third-party scripts, browser extensions, or key-sniffing scripts running in your main document pool, creating a hardened frontend sandbox.

Can corporate accounts or accounting firms pay via manual invoice or wire transfer (SWIFT/SEPA)?

Yes. If your corporate credit card is declined due to international banking restrictions or if your procurement department requires manual invoicing, purchase orders (PO), or bank wire transfers (SWIFT/SEPA), our team can manually issue a formal invoice with tax reverse-charge support. Contact support@privacyscrubber.com to request an enterprise invoice.

How does PrivacyScrubber prevent data residue in system RAM (V8 memory wiping)?

To prevent PII or case documents from remaining in your device's memory after sanitization, the processing engine actively overwrites all temporary parsing buffers (used for DOCX, PDF, and spreadsheet extraction) at the byte level using Uint8Array.fill(0) in local memory immediately after use, ensuring zero sensitive residue remains in RAM before garbage collection.

Does changing the detection profile reset my protected session data?

No. Changing your detection profile (e.g., from General PII to Wealth Management) does not clear your active session or reset your local token maps. This ensures that any tokens generated using your previous profile remain fully decryptable when you paste AI responses back to 'Reveal' the original text. To completely wipe your session, rotate encryption keys, and clear all memory, click the 'Clear' button at any time.

How do local Audit Receipts and Teams Handoff work without a backend database?

PrivacyScrubber operates entirely in your browser's local RAM. Compliance audit receipts and team handoffs are exclusive features of the Teams Subscription. For audit compliance, the system builds an offline cryptographic PDF receipt documenting entity counts, timestamps, and active compliance profiles. For Teams Handoff, it encrypts the tab's session map in-memory using Argon2id and XChaCha20-Poly1305. Your colleague decrypts the token map on their machine using the shared key — no central database or server ever touches your data.

Does PrivacyScrubber use third-party tracking, analytics, or review widgets?

No. To maintain a strict zero-trust data sanitization architecture, PrivacyScrubber does not load third-party analytics trackers, cookies, or reviews integrations (such as Google Customer Reviews or similar widgets). Adding dynamic third-party scripts would require relaxing our Content Security Policy (CSP) and could allow external servers to inspect page states or log user environments. We display reviews statically or link to external platforms like G2 or the Chrome Web Store to ensure zero data leakage.

Can I use PrivacyScrubber as a PII MCP Server for Cursor or Claude Desktop?

Yes. PrivacyScrubber offers an official local Model Context Protocol (MCP) server package (@privacyscrubber/mcp-server) that integrates directly with Cursor IDE, Windsurf, and Claude Desktop. It acts as a local prompt security gateway, scanning and masking PII and API keys locally in volatile RAM before they are transmitted to external LLM APIs.

How are Team Administrator roles managed without a backend server?

In our Zero-Trust Data Sanitization (ZTDS) architecture, there are no server-side accounts or traditional 'Admin' vs 'User' roles. Team Administration is handled via client-side Blueprints. A team lead sets up the required compliance profiles, custom regex rules, and organization name locally, then locks the configuration and exports a cryptographic 'Team Blueprint' URL. When workers click this URL, their local PrivacyScrubber instance activates the TEAMS license, imports the mandated configuration, and disables their ability to edit or delete rules, ensuring organization-wide compliance securely without a backend database.

Zero-Trust Client-Side vs. Cloud APIs.

AI Summary / Key Takeaways

Verified Zero-Trust Logic

"Architectural comparison between zero-trust client-side sanitization and legacy cloud DLP APIs. PrivacyScrubber eliminates the transmission risk inherent in cloud-based scrubbers by redacting data locally, ensuring absolute data sovereignty and superior network performance with zero latency."

Zero-Server Airplane Mode No Server Logs

Live Simulation

Zero-Trust Data Sanitization

Watch PrivacyScrubber's local engine transform sensitive Comparison data instantly in your browser, without any API calls.

Automated Detection Classes:

USER_NAME Email Addresses User / Server IP Addresses SESSION_ID QUERY_TEXT

100% Client-Side Execution

Wasm_Engine

TOOL COMPARISON > User: alex.carter@startup.io Session ID: sess_8xKm2pL4nQ9rT7vZ | IP: 203.0.113.42 Query: "Analyze our competitor Acme Corp pricing strategy."

TOOL COMPARISON > User: [EMAIL_1] Session ID: [ID_1] | IP: [IP_1] Query: "Analyze our competitor [ORG_1] pricing strategy."

Zero-Trust Client-Side vs. Cloud APIs. Dashboard — Enterprise Grade · Local Execution ZTDS

Client-side processing eliminates third-party trust risk.

Zero network latency: Redaction happens at local CPU speed.

Complete data sovereignty: Data never leaves your device.

Airplane Mode Verified: Physical proof of zero-server logic.

Enterprise-Grade AI Privacy

Add custom redaction rules and priority support with PRO.

GO PRO

Zero-Trust GRC Checklist

GDPR: 100% local. No EEA egress.

HIPAA: Removes 18 PHI parameters.

SOC 2: Zero third-party cloud routing.

Billing: Flat-rate Teams ($99/mo).

Verified by the Enterprise Board

Our 10-persona AI team ensures Comparison compliance at every layer.

Chief Information Security Officer

Security Lead

"PrivacyScrubber eliminates Shadow AI risk by intercepting PII at the edge. We've mapped this hub to SOC 2 Type II and ISO 27001 masking controls."

Data Protection Officer & Legal Counsel

Legal Counsel

"Under GDPR Article 32 and HIPAA Safe Harbor, local anonymization removes the AI provider from the 'Data Processor' chain, negating complex DPA liabilities."

Financial Audit & Compliance Lead

Financial Audit

"A single GLBA or PCI-DSS violation costs 100x more than a site-wide license. We provide verifiable ROI through data loss prevention at the prompt level."

The Comparison AI Privacy Gap

Data Persistence

Raw sensitive inputs are often stored by AI vendors for model training.

Compliance Liability

Uploading unredacted PII violates industry-specific global privacy mandates.

Shadow AI Risk

Employees using unvetted AI tools create invisible data leakage vectors.

Raw Input: Client: Johnson & Associates, Account ID: ACCT-9914, Phone: (555) 234-5678

Sanitized: Client: [COMPANY_1], Account ID: [ID_1], Phone: [PHONE_1]

ZERO-TRUST BRIDGE ACTIVE

Secure Comparison AI Workflow

Enable high-performance AI without client data leaving your machine

Import Files

Upload documents locally into the PrivacyScrubber sandbox.

Local Masking

Identify and tokenize sensitive strings entirely within browser memory.

Analyze with AI

Submit sanitized prompts to ChatGPT or Claude for processing.

Reverse Scrub

Restore original values into the AI response locally for the final draft.

Protocol: The 5-Step Airplane Mode Audit

Don't trust us. Trust the laws of physics. Follow this audit procedure to verify zero-server PII sanitization for Comparison workflows.

Load the tool: Open PrivacyScrubber.com in your browser.

Go Offline: Disconnect your WiFi or enable Airplane Mode. The site remains fully functional.

Process Data: Paste a sensitive comparison document and run the scrubber.

Inspect Network: Open Developer Tools (F12) and check the 'Network' tab. Verify 0 requests were made.

Verify Local RAM: All comparison identifiers stay in your transient browser memory—never stored, never logged.

Relevance-Mapped Industry Profile

Named Entity (NER) General Profile: Detection Coverage

Universal Named Entity Recognition ruleset. Detects names, government IDs, bank accounts, project codenames, and geographic locations across unstructured text.

22+ Industry Profiles Active in Web, Extension & MCP

Top 6 Comparison Sensitive Entity Types Detected & Scrubbed

Automated Local Tokenization

[PERSON_NAME] Critical (Personal Identity)

Individual Full Name

Transform: Mark Miller → [NAME_1]

[ID_NUMBER] Critical (Regulatory PII)

Government SSN / Tax ID

Transform: 999-12-4482 → [ID_1]

[ACCOUNT_ID] Critical (Financial PII)

Bank IBAN & Account Ref

Transform: CH-8821-9901 → [ID_2]

[PROJECT_CODE] High (IP Leak)

Proprietary Project Codename

Transform: PROJECT NEBULA-X → [PROJECT_1]

[LOCATION_NAME] Medium (Location)

Geographic Location

Transform: Geneva Headquarters → [LOCATION_1]

[MONEY_VALUE] High (Value Exposure)

Financial Balance Amount

Transform: $1,450,000 → [VALUE_1]

Continuous Detection Engine Expansion & Custom Regex Sovereignty

The 6 entity types above represent the core detection baseline for Comparison. Our zero-trust engine detects hundreds of additional data classes and is continuously updated with new heuristic patterns, shadow AI leak vectors, and custom regulatory rulesets. Need proprietary database IDs or internal project codenames masked? PRO and TEAMS users can define unlimited custom regular expressions running 100% locally in browser RAM.

Explore PII Scanner

Engine Workflow

How the PrivacyScrubber Engine Solves This

Interactive Tool Controls for Comparison. Hover for specs.

Zero API Latency

Cloud-based DLP intercepts add seconds of delay. Client-side processing takes milliseconds.

Technical Audit Data

Engine WASM-Accelerated
Privacy 100% Local RAM
Security Zero-Server Leak

No Supply Chain Risk

Unlike cloud DLP solutions, if our servers were hypothetically compromised, your data would remain unaffected. We don't have it.

Technical Audit Data

Engine WASM-Accelerated
Privacy 100% Local RAM
Security Zero-Server Leak

Comparison Compliance Library

Step-by-step redaction workflows for Comparison environments.

Core Capabilities	Free Web Only	PRO $15/mo or $110 Lifetime	TEAMS $99/mo	ENTERPRISE Custom Tier
100% Local Processing (Airplane Mode)
Text Paste & Single File Docs	Max 5k chars	UNLIMITED	UNLIMITED	UNLIMITED
Batch Processing & Background OCR	—
Custom Regex & Specific Redaction Rules	—
Chrome Extension Native App	—
Silent Corporate Deployment (MDM)	—	—
Policy Control Center & Enforcement	—	—
On-Premise Source Code License	—	—	—
100% Air-Gapped Operation	—	—	—
Dedicated GRC Support	—	—	—
Includes guaranteed no server logs for all tiers. 100% Client-Side.	Try Free	Details	Deploy TEAMS	Enterprise Hub

Add to Device Home Screen

Zero-Trust Client-Side vs. Cloud APIs.

AI Summary / Key Takeaways

Zero-Trust Data Sanitization

Verified by the Enterprise Board

The Comparison AI Privacy Gap

Data Persistence

Compliance Liability

Shadow AI Risk

Secure Comparison AI Workflow

Import Files

Local Masking

Analyze with AI

Reverse Scrub

Protocol: The 5-Step Airplane Mode Audit

Named Entity (NER) General Profile: Detection Coverage

Top 6 Comparison Sensitive Entity Types Detected & Scrubbed

Individual Full Name

Government SSN / Tax ID

Bank IBAN & Account Ref

Proprietary Project Codename

Geographic Location

Financial Balance Amount

Continuous Detection Engine Expansion & Custom Regex Sovereignty

How the PrivacyScrubber Engine Solves This

Zero API Latency

No Supply Chain Risk

Comparison Compliance Library

PrivacyScrubber vs ChatGPT

Secure Workspace vs Browser Extension for AI Privacy

ChatGPT Privacy Settings Explained

Claude Privacy vs PrivacyScrubber

Google Gemini Data Privacy and Masking

Top 10 Privacy Focused AI Tools in 2026

Best Tool to Protect & Secure PII for LLMs

PrivacyScrubber vs Nightfall AI

PrivacyScrubber vs Microsoft Purview AI Hub

Local vs Cloud PII Masking Workspace

Open Source PII Masking Workspaces vs PrivacyScrubber

Top 10 AI Privacy Tools & Scrubber Alternatives (2026 Comparison)

PrivacyScrubber vs Amazon Macie for AI Prompts

PrivacyScrubber vs Google Cloud DLP

PrivacyScrubber vs Microsoft Presidio

ChatGPT Enterprise vs Local PII Masking Workspace

Claude for Work vs PrivacyScrubber (Zero-Trust PII Comparison)

PrivacyScrubber vs AWS Comprehend Medical

PrivacyScrubber vs. Enterprise Cloud DLP

Zero-Trust vs. Server-Side Data Masking

ChatGPT Enterprise Data Controls vs. Client-Side Sanitization

PrivacyScrubber vs OpenAI Privacy Filter

Synthetic Data vs Tokenization

Best ChatGPT Privacy Extensions Compared (2026)

Is Claude AI Safe? Anthropic's Data Policy Explained (2026)

Microsoft 365 Copilot Data Privacy

Nightfall AI vs PrivacyScrubber (Local vs Cloud DLP)

Microsoft Presidio Alternative for Browser-Based Redaction

Compare Edition Features

Comparison Technical Compliance Library

Frequently Asked Questions

Zero-Trust Sanitization Verified

Session Memory Handoff

Save Output Package

Blueprint Generated

Add to Device Home Screen