Send it all to frontier AI. Your client stays a stranger.
Upload a policy, a contract, an appraisal. What comes back is a twin document — same substance, fake identities — that you can hand to ChatGPT, Claude or Gemini without a second thought. When the AI is done, the real names slot back in. An airlock between your clients and the rest of the world.
No frontier model ever sees a real name, IBAN or fiscal code
Three steps. Whichever AI you already trust.
We don't ask you to change tools or habits — only to send your documents out under a spare identity.
Shield
Upload a PDF, a markdown file or plain text. Names, fiscal codes, IBANs, plates, policy numbers: every real value gets a plausible Italian stand-in, consistent across the whole document. Download the disguised text and the key to bring it back.
Process anywhere
Take the disguised document to ChatGPT, Claude, Gemini — anywhere. It reads like the original, reasons like the original: the AI notices nothing, because there is nothing real left to discover.
Restore
Paste the AI's answer, load the key: every stand-in becomes the real name again. Even if the AI changed casing or spacing in the codes, we recover them anyway.
Fake identities, not black holes in the text
The policyholder Mario Rossi, fiscal code RSSMRA80A01H501Z, resident at Via Roma 1, Milano, holder of policy No. 458812.
The policyholder Paolo Salata, fiscal code SLTPLA57T10D612R, resident at Via Garibaldi 12, Torino, holder of policy No. 771249.
No [PERSON_1] breaking the sentence: just Italian data, real in form, fake in substance. Same person, same stand-in, start to finish.
What really happens to your data
The key stays encrypted
The link between real name and stand-in is AES-GCM encrypted on the server: nobody reads it in cleartext, not even with access to storage.
One identity, one disguise
The same client always gets the same stand-in, even when the document spells them differently. The story stays coherent from start to finish.
Built for Italian data
Fiscal code, VAT, IBAN, plates, PEC, policy and claim numbers, cadastral IDs: 24 PII types, validated with the same checksums as the real thing.
The key is yours, not the server's
The shield file you download works even when the server session expired days ago. Restoration doesn't depend on us — it depends on you.
Let's not dress it up: PDF-to-markdown conversion runs through a cloud OCR service, which does see the original document. From that point on, though, everything changes — it's the pseudonymized markdown, and only that, that reaches the frontier LLM. And because detection is probabilistic, not magic, the final call stays yours: always scroll the pseudonymized document before sending it. That's the honest price of a tool that actually works, not a buried disclaimer.