Work with sensitive files.
Leak nothing.
PII Shield removes names, IDs, emails and more from documents, spreadsheets, email and audio — entirely on your computer. Anonymize before you paste into AI, share a file, or meet a privacy rule — then restore the real values when you’re done.
Use AI safely
Paste into ChatGPT, Claude or Gemini — on the shape of your document, not your clients’ identities.
Share & redact
Hand off a clean copy, or burn real redactions into a PDF for disclosure — underlying text and metadata gone.
Meet privacy rules
Keep personal data on-device for GDPR / HIPAA-minded work. No account, no telemetry, nothing uploaded.
This is the real review experience, running here in your browser on sample data. Click a highlight to keep or redact it, select any text to add your own, then press Anonymize.
Four reasons it’s different.
Private by design
Detection and anonymization run entirely on your machine. No account, no telemetry, nothing uploaded — the architecture, not a setting.
Documents and audio in one app
Contracts, spreadsheets and email — plus recorded calls and interviews. One desktop tool covers both, fully offline.
Pay once, keep it forever
A one-time license, not a subscription. Free updates within the major version. No seats, no metering, no renewal.
Reversible for AI
Placeholders swap back to the real values locally — so you can round-trip through ChatGPT, Claude or Gemini and still get a usable result.
Your originals never leave your computer. Only placeholders travel.
Whether you’re pasting into an AI tool, sharing a file, or filing for disclosure — the raw personal data stays local. The diagram below shows the AI case; the boundary holds for any destination.
Detect
Open a file in the desktop app. PII Shield finds personal data with an AI model plus precise pattern rules.
Review
Check the findings in a clear review panel. Nothing changes without your OK.
Anonymize
Get a clean copy with placeholders — ready to share or paste into AI.
Restore
Round-tripping through AI? One click brings the real values back — locally. Skip it when you’re simply sharing.
Everything you need to de-risk sensitive files.
Anonymize documents
.docx, .pdf, .xlsx, .eml, .txt, .md, .csv. Formatting preserved; hidden metadata, comments and tracked deletions scrubbed.
Restore real values
Anonymization is reversible — bring the originals back locally, so shared or AI-processed output stays usable.
Redact PDFs for real
Burn opaque boxes and actually remove the underlying text and metadata — not just cover it. Irreversible when you need it.
Audio, too
Transcribe recordings, separate speakers, and bleep spoken PII — all offline. More below.
Human review (HITL)
See every detected item before anything changes. Approve, add, or remove — you’re in control.
Custom term lists
Add your own names or terms to always-remove or never-remove, and choose which categories to detect per run.
The only offline desktop that handles audio too.
Recorded calls, client interviews, therapy sessions, depositions. PII Shield transcribes locally, separates who said what, detects personal data in the transcript, and bleeps it out of the audio track itself — then hands you an anonymized, reversible transcript. No cloud, no per-minute fees.
- Local transcription — files never leave your computer
- Speaker separation (diarization)
- Bleep spoken PII in the audio track itself
- Reversible, anonymized transcript
The desktop app is the core. It also reaches into your tools.
Browser extension
Anonymize text and file attachments directly on ChatGPT, Claude and Gemini before you hit send. Restore the AI’s reply in place.
Microsoft Word add-in
Shield a document’s PII from inside Word — with review — as a clean replace or tracked changes. Restore later.
Claude Desktop connector
Let Claude work on your files through PII Shield — it only ever sees the anonymized version. Guided modes for reports, memos, redlines and summaries.
Built for people who are accountable for other people’s data.
Lawyers & small firms
Review and redline contracts, NDAs and case files with AI — without exposing client identities. Real PDF redaction for disclosure.
Healthcare & therapists
Notes, referrals and session recordings stay on-device. Anonymize before you use any AI tool or share outside the practice.
Consultants & accountants
Client spreadsheets, invoices and payroll — de-risked locally before they touch an AI assistant or leave your laptop.
HR & recruiting
Employee records, payroll and candidate files. Strip identities before you analyze or send outside the team; restore locally when you’re done.
Journalists & researchers
Protect sources in documents and recorded interviews. Bleep names from audio; keep a reversible record for yourself.
Compliance & DPO teams
Handle DSARs and disclosure requests on-device. Real PDF redaction for hand-offs, plus a local audit log of what was processed.
Serious detection, not just regex.
A multilingual AI model works alongside checksum-validated patterns to cut false positives. A legal/boilerplate filter avoids over-redacting statutes, courts and country names.
- Checksum validation for IBANs, cards & national IDs
- 7 languages: EN, DE, FR, IT, RU, NL, ES
- Custom always-remove / never-remove term lists
Privacy isn’t a setting. It’s the architecture.
We’re open about every network call the desktop app can make — and none of them carry your documents or PII.
Read our Privacy Policy →See PII Shield in action.
Try it free. Buy once. Keep it forever.
The trial is the full app — no feature gates. A license just keeps it running after 14 days. No subscription.
No key, no sign-up.
- The complete app — every feature
- No sign-up, no license key
- All formats & all integrations
- Processing stays 100% local
Yours forever. Free updates within the major version. Node-locked to 1 device — deactivate to move machines.
- All document, spreadsheet, email & audio formats
- Browser extension, Word add-in & Claude connector
- Human review, custom term lists & per-run settings
- Free updates within the major version
- Perpetual — no subscription
Works offline after activation
Frequently asked questions
No. Detection and anonymization run entirely on your device. The only network calls are license/update/model-download and optional diagnostics — never your documents.
Yes — anonymization is reversible. Restore happens locally, so shared or AI-processed output stays usable.
A browser extension for ChatGPT/Claude/Gemini, a Microsoft Word add-in, and a Claude Desktop connector.
DOCX, PDF, XLSX, EML, TXT, MD, CSV, and audio (MP3/WAV/M4A/FLAC/OGG).
40+ PII types via an AI model plus checksum-validated patterns, across multiple languages and countries.
Only for the first-run model download, the license check, and updates. Everyday use works offline.
Windows 10/11 today. macOS is planned.
No. Download and use it free for 14 days — no sign-up, no key. The trial is tied to your device, so reinstalling won’t reset it.
A one-time, perpetual, single-device license. Deactivate to move devices. 14-day free trial first, no key needed.
Refund terms are set at checkout — see the license provider’s policy.
Try PII Shield free for 14 days.
No data leaves your computer. No account needed.