Legal
Contracts, briefs, exhibits: anonymize before the AI and privilege stays intact.
100% localno trackerno file sent
Pull the Wi-Fi: nothing stops.
Anoni detects the sensitive data in your documents and swaps it for pseudonyms. The text still reads naturally for an AI, and stays reversible. Everything runs on your Mac or PC.
FreemacOS, Windows & Linux

Real capture. Nothing left the machine.
A real proof-of-address letter run through the app. On the left, the review with its detections. On the right, the PDF as it comes out.


Everything is caught
Every sensitive value is detected and highlighted by category.
You stay in control
Add, remove or draw your own region to redact.
Truly removed
In the exported PDF the masked text is stripped from the file. Not just hidden under a rectangle.
One click to anonymize, one click to decode. No copy-pasting by hand, no unreadable tokens to splice back in.
Open a PDF, DOCX, Excel, email, TXT, Markdown, CSV or image in Anoni. It doesn’t move off your machine.
A French model (CamemBERT) and business rules flag the sensitive data, offline. They swap it for believable fakes.
You paste the anonymized text into the AI of your choice. It sees names that look real, never yours.
You paste the AI’s reply back into Decode, and Anoni puts your real data back in place, from the encrypted vault.
Roles bound by confidentiality or GDPR who want to use AI without handing over their files.
Contracts, briefs, exhibits: anonymize before the AI and privilege stays intact.
Résumés, personnel files, interview notes: AI helps without seeing employee data.
Reports, patient letters: health data leaves before any analysis.
Administrative files, citizen letters: a sovereign tool that stays on the machine.
Contracts, letters, HR files: Anoni anonymizes what it should. You decide the rest.
“Jean Dupont” becomes “Marc Leroy”, if you want it. The default is a ⟦PERSON·1⟧ token, safer in front of an AI. The vault puts everything back afterward.
Jean DupontMarc Leroy
A PDF generated on your machine: categories, counts, exclusions, SHA-256 fingerprint, version. No personal data inside. It’s the record you file to show what was done.
CategoriesCountsExclusionsSHA-256Version
Your own always-mask list: client names, projects, internal references. Whatever model runs, they get caught.
One click: Anoni scans, replaces, copies. You paste into the AI, then paste its reply into Decode.
Draw a rectangle over a signature, a stamp, a photo. In the exported PDF it’s opaque black.
A word slipped past detection? Select it, and it’s masked everywhere in the document.
The French model (CamemBERT) and business rules work across PDF, DOCX, Excel, email, TXT, Markdown, CSV and images. Local OCR handles scanned PDFs and images.
Detection doesn’t replace a read-through: on a sensitive document, check behind the tool before you send it.
Try it on one of your own documents.
Free · no card · no tracker · 100% local
Drop an .eml. Anoni reads what your mail client shows: headers, body, forwarded message. Not the attached files.
Anoni doesn’t open them.
It writes their names and their number into the text, nothing else.
What you get back is the anonymized text of the message, not an .eml. Outlook’s .msg is not supported. Word, Excel, PDFs and images come back in their own format.
Redaction
The text is removed, not hidden.
All the work happens on your machine. It’s not a box to tick. It’s the only way Anoni runs. Pull the Wi-Fi: nothing stops.
99.0% of sensitive characters covered · 94.8% strict recall
Detection and anonymization run locally. No document or excerpt is sent online. Only the very first launch downloads the engine, once.
The mapping between fake name and real value is encrypted with AES-256-GCM, derived from your passphrase. Without it, nobody decodes. You included.
Reversible pseudonymization through the vault, or plain redaction: a PDF with real black bars and no way back.
One email at activation, a license check at launch. No tracker, not a single file collected.
Everything stays local and each run produces an anonymization report with no personal data, ready to keep on file. On a sensitive document, read it through first. The tool helps. It doesn’t decide for you.
They cover a hosting provider: how a company keeps your data on its servers. Anoni hosts nothing. Your documents stay on your machine, so there is no server to certify.
The app, no. But the models that do the detection are open (Apache-2.0, MIT): you can see what reads your documents.
Free, on Mac, PC or Linux. A Pro edition is being considered.
No cardno tracker100% local