Features & Capabilities
A complete reference of every feature in the anonym.legal Office Add-in for Microsoft Word.
5 Anonymization Methods
Choose the right method for your use case. Each method can be applied globally or per entity type using per-entity operators.
Replaces PII with typed tokens like <PERSON_1>, <EMAIL_ADDRESS_1>. Consistent within a document -- the same name always gets the same token.
Reversible with the replacement mapping.
Replaces characters with asterisks while preserving the format. Useful when you need to show partial data like the last 4 digits of an SSN.
Configurable masking character and visible chars.
Completely removes the PII and replaces it with [REDACTED]. Irreversible -- the original data cannot be recovered.
Best for maximum privacy and regulatory compliance.
Produces a cryptographic hash of the PII. The same input always produces the same hash, enabling cross-document correlation without exposing the data.
One-way function. Cannot be reversed.
Encrypts PII with AES-256-GCM authenticated encryption. The ciphertext replaces the original text in the document. With the correct encryption key, you can decrypt and restore the original data.
Best for workflows where authorized users need to deanonymize later. Keys are managed via the Encryption Keys feature.
Presets
Presets save your anonymization configuration so you can reuse it across documents and devices.
Save Configurations
Save entity selections, method, language, and per-entity operator settings as a named preset.
Cross-Device Sync
Presets sync automatically to your anonym.legal account. Access them on any device where you sign in.
Per-Entity Operators
Configure different operators for each entity type within a preset (e.g., Replace names, Mask SSNs, Hash emails).
Search & Filter
Search presets by name, description, entities, or tags. Filter to find the right preset quickly.
Per-Entity Operators
Instead of applying one method to all entities, you can assign different operators to each entity type for fine-grained control.
Example Configuration
This configuration can be saved as a preset and reused across documents. Each entity type gets the treatment most appropriate for its sensitivity level.
Encryption Keys
Manage encryption keys for the Encrypt anonymization method. Keys are stored securely on the server, wrapped with your account's key encryption key (KEK) for zero-knowledge security.
ZK-Wrapped Storage
Keys are encrypted with your account KEK before storage. The server never sees your raw encryption keys.
Auto-Load
When you select a saved key from the dropdown, the key value is automatically fetched and decrypted. No manual entry needed.
Session Persistence
Keys persist for the duration of your session. No need to re-select after each anonymization. Cleared on sign-out.
Preview Window
The Preview Window opens after analysis and lets you review and customize the anonymization before applying it to your document.
Method Selector
Switch between Replace, Mask, Redact, Hash, and Encrypt directly from the preview. Color-coded method badges show the active method at a glance.
Language Selector
Change the detection language without going back to settings. Click "Apply Changes" to re-analyze with the new language.
Preset Selector
Switch between saved presets in the preview. The collapsible panel shows preset name, entity count, and description.
Apply Changes
When you change the method, language, or preset, an "Apply Changes" button appears. Click it to re-analyze with your new settings before applying to the document.
Preserve Formatting
When enabled, the add-in maintains the original formatting (bold, italic, underline) of the text being anonymized. The replacement tokens inherit the same formatting as the original text.
Note: Note: Preserve Formatting works best with simple inline formatting. Complex layouts with tables, nested styles, or track changes may require manual review after anonymization.
Multi-Language Detection
The add-in detects PII in 48 languages. Set the detection language in settings or switch it from the Preview Window. The language determines which NER models and regex patterns are applied.
Cross-Device Sync
Your configuration syncs automatically across all devices where you sign in with your anonym.legal account.
Presets
Entity selections, methods, operators
Custom Entities
Custom regex patterns and deny lists
Encryption Keys
ZK-wrapped key metadata and values
Sync happens automatically in the background. If you make changes while offline, they are cached locally and synced when connectivity is restored.