Anonymize Documents Securely

The anonym.legal Desktop App keeps your documents on your device while leveraging cloud-powered PII detection. Only extracted text is sent for analysis — files are never uploaded.

Windows, macOS, Linux48 LanguagesGDPR & HIPAA ReadyEncrypted Local History

Desktop App Preview

How It Works

The desktop app combines local file handling with cloud-powered analysis. Here's exactly what happens at each step.

1

You Open a File

Your Computer

Drag a PDF, Word, Excel, or text file into the app. The file is read directly from your disk.

The original file never leaves your device and is never uploaded to any server.

2

Text Is Extracted Locally

Your Computer

The app extracts the raw text content from your document using local libraries.

For PDFs this means parsing text layers; for DOCX it means reading XML content. All done on your machine.

3

Text Sent for PII Detection

Cloud API

Only the extracted text (not the file) is sent over an encrypted TLS connection to our API for entity detection.

Our Presidio-based engine scans for 50+ entity types (names, emails, phone numbers, etc.) and returns their positions.

4

Anonymization Applied

+Your Computer + Cloud API

Based on your preset and operators (encrypt, mask, hash, etc.), the detected entities are anonymized. Encryption keys never leave your vault.

The API returns anonymized text. If you use encryption, only your local vault holds the keys — we never see them.

5

Document Rebuilt Locally

Your Computer

The anonymized text is inserted back into the original document format, preserving layout, fonts, and formatting.

The output file is saved to your chosen location. The original file remains untouched.

6

History Saved to Encrypted Vault

Your Computer

A record of what was anonymized is stored in your encrypted local vault for future reference or deanonymization.

The vault uses AES-256-GCM encryption with your 24-word recovery phrase. History is never synced to our servers.

On your deviceEncrypted to API

Your files never leave your device. Only extracted text travels over an encrypted connection to our PII detection API. All keys, history, and documents stay on your machine.

Enterprise-Grade Security, Consumer-Friendly Experience

Secure File Handling

Documents stay on your device. Text is extracted locally, sent to our secure API for PII detection, and anonymized documents are reconstructed on your machine.

  • Documents stay on your device
  • No document uploads — only text sent for analysis
  • Works with sensitive internal documents
  • Compliant with strict data policies

Military-Grade Vault Encryption

All your credentials, history, and encryption keys are protected with AES-256-GCM encryption, derived from a 24-word recovery phrase using Argon2id.

  • AES-256-GCM encryption
  • Argon2id key derivation
  • 24-word BIP39 recovery phrase
  • PIN-protected quick access
Powered by Zero-Knowledge Security

AI-Powered PII Detection

Leverage our cloud API to detect 50+ entity types across 48 languages with configurable confidence thresholds.

  • 50+ entity types
  • 48 language support
  • Adjustable detection threshold
  • Context-aware recognition

Compliance-Ready Presets

Pre-configured detection profiles for GDPR, HIPAA, PCI-DSS, and more. Create custom presets for your specific needs.

  • GDPR Compliance preset
  • HIPAA Medical preset
  • Financial Services preset
  • Custom presets via web app

Reversible Encryption

Use encryption keys for reversible anonymization. Only you hold the keys - decrypt when needed while keeping documents safe.

  • Create and manage encryption keys
  • Apply encryption per entity type
  • Keys stored only in your vault
  • Decrypt anytime with your key

Multi-Format Support

Process PDF, Word, Excel, and text-based files. Convert between formats during anonymization.

  • PDF (up to 50MB)
  • DOCX (up to 30MB)
  • XLSX (up to 20MB)
  • TXT, CSV, JSON, XML

48 Languages

Interface and detection support for 48 languages. Switch languages instantly from the header.

  • Full UI in 48 languages
  • Multi-language entity detection
  • Regional preset recommendations
  • Instant language switching

Encrypted History

All your processing history stored locally in your encrypted vault. View, search, and use for deanonymization.

  • View past anonymizations
  • Copy original or anonymized text
  • Use history for deanonymization
  • Fully encrypted storage

Desktop App vs Web App

Choose the right tool for your workflow

FeatureDesktop AppWeb App
File processingLocal files + cloud analysisCloud-based
Maximum file size50MB25MB
Encrypted local historyYesNo
Encryption keysLocal vaultCloud sync
Bulk processingQueue systemOne at a time
DeanonymizationBuilt-inSeparate tool
Best forSensitive documents, complianceQuick tasks, collaboration

Who Uses the Desktop App?

Legal Teams

Process contracts and legal documents securely — files stay on your device, only text is sent for analysis

Healthcare Providers

HIPAA-compliant PHI anonymization with documents staying on your device

Financial Institutions

Process banking documents with PCI-DSS ready presets and local encryption

HR Departments

Anonymize employee data for analytics while maintaining GDPR compliance

Research Institutions

De-identify research data with reversible encryption for authorized access

Government Agencies

Process sensitive documents with files remaining on your device and encrypted vault storage

Ready to Protect Your Documents?

Download the desktop app and start anonymizing files in minutes. Included with your subscription.

Need Complete Offline Anonymization?

If you need a fully offline solution with no server connection, no credits, and unlimited anonymization, visit our sister product.

Visit cloak.business