Your documents to frontier AI. PII stays home.
Upload a document, get a pseudonymized markdown version with coherent fake data, process it with the LLM of your choice, and restore the real values when you come back. An airlock for your data.
The frontier LLM never sees real PII
Three steps, no constraint on the AI you use
The flow is deliberately detached: the AI processing happens wherever you want, with whatever tool you want.
Shield
Upload a PDF, a markdown file or plain text. The engine detects Italian PII — names, fiscal codes, IBANs, plates, policy numbers — and replaces them with plausible, coherent fake data. Download the pseudonymized document and the shield file.
Process anywhere
Take the pseudonymized markdown to ChatGPT, Claude, Gemini or any other tool. The document stays readable and semantically intact: the AI works well, but on data that doesn't exist.
Restore
Paste the AI output and load the shield file: every pseudonym becomes the corresponding real value again. Even if the AI reformatted codes or casing, the engine recovers them.
Fake data, not placeholders
The policyholder Mario Rossi, fiscal code RSSMRA80A01H501Z, resident at Via Roma 1, Milano, holder of policy No. 458812.
The policyholder Paolo Salata, fiscal code SLTPLA57T10D612R, resident at Via Garibaldi 12, Torino, holder of policy No. 771249.
No [PERSON_1] confusing the AI: replacement values are formally valid Italian data. The same original value always receives the same pseudonym, throughout the document.
What happens to your data
Encrypted mapping
The original ↔ fake map is AES-GCM encrypted on the server and never exposed in cleartext storage.
Referential consistency
The same name always receives the same pseudonym, even across spelling variants. The document stays coherent.
Italian taxonomy
Fiscal code, VAT, IBAN, plates, PEC, policy and claim numbers, cadastral IDs: 24 PII types with checksum validation where it exists.
Portable shield file
The file you download enables restoration even after the server session expires. Your data remains yours.
Transparency note: PDF→markdown conversion uses a cloud OCR service, which therefore sees the original document. The protection perimeter starts from the pseudonymized markdown: that — and only that — reaches the frontier LLM. Detection of unstructured PII is probabilistic: always review the pseudonymized document before sending it.