Anoni

100% localno trackerno file sent

Use AI without exposingyour documents.

Pull the Wi-Fi: nothing stops.

Anoni detects the sensitive data in your documents and swaps it for pseudonyms. The text still reads naturally for an AI, and stays reversible. Everything runs on your Mac or PC.

FreemacOS, Windows & Linux

The Anoni app reviewing a proof-of-address letter: every detected personal detail highlighted by category, with the detection summary on the right.

Real capture. Nothing left the machine.

Real example

Before, after. Drag the handle.

A real proof-of-address letter run through the app. On the left, the review with its detections. On the right, the PDF as it comes out.

The same proof-of-address letter before and after redaction: personal details highlighted by category on the left, opaque black bars on the right. The masked text is permanently removed from the PDF.
Review · 16 detectionsExported · redacted
  • Everything is caught

    Every sensitive value is detected and highlighted by category.

  • You stay in control

    Add, remove or draw your own region to redact.

  • Truly removed

    In the exported PDF the masked text is stripped from the file. Not just hidden under a rectangle.

How it works

Document → Anoni → AI → decode.

One click to anonymize, one click to decode. No copy-pasting by hand, no unreadable tokens to splice back in.

  1. 01

    Your document

    Open a PDF, DOCX, Excel, email, TXT, Markdown, CSV or image in Anoni. It doesn’t move off your machine.

  2. 02

    Anoni anonymizes

    A French model (CamemBERT) and business rules flag the sensitive data, offline. They swap it for believable fakes.

  3. 03

    ChatGPT, Claude, Copilot

    You paste the anonymized text into the AI of your choice. It sees names that look real, never yours.

  4. 04

    Decode the reply

    You paste the AI’s reply back into Decode, and Anoni puts your real data back in place, from the encrypted vault.

Jean DupontMarc LeroyThe AI reads a realistic name, not a token.
Who it’s for

For people who can’t afford a leak.

Roles bound by confidentiality or GDPR who want to use AI without handing over their files.

Legal

Contracts, briefs, exhibits: anonymize before the AI and privilege stays intact.

HR

Résumés, personnel files, interview notes: AI helps without seeing employee data.

Healthcare

Reports, patient letters: health data leaves before any analysis.

Public sector

Administrative files, citizen letters: a sovereign tool that stays on the machine.

Features

Made for real working documents.

Contracts, letters, HR files: Anoni anonymizes what it should. You decide the rest.

Believable fake names

“Jean Dupont” becomes “Marc Leroy”, if you want it. The default is a ⟦PERSON·1⟧ token, safer in front of an AI. The vault puts everything back afterward.

Jean DupontMarc Leroy

Anonymization report (GDPR)

A PDF generated on your machine: categories, counts, exclusions, SHA-256 fingerprint, version. No personal data inside. It’s the record you file to show what was done.

CategoriesCountsExclusionsSHA-256Version

Personal dictionary

Your own always-mask list: client names, projects, internal references. Whatever model runs, they get caught.

Copy for the AI

One click: Anoni scans, replaces, copies. You paste into the AI, then paste its reply into Decode.

Redaction areas

Draw a rectangle over a signature, a stamp, a photo. In the exported PDF it’s opaque black.

Manual selection

A word slipped past detection? Select it, and it’s masked everywhere in the document.

11 types of data caught.

The French model (CamemBERT) and business rules work across PDF, DOCX, Excel, email, TXT, Markdown, CSV and images. Local OCR handles scanned PDFs and images.

NamesSIRET / SIRENOrganizationsLocationsAddressesEmailsPhone numbersIBANNIRDatesSecretsOCR · scanned PDFs

Detection doesn’t replace a read-through: on a sensitive document, check behind the tool before you send it.

Try it on one of your own documents.

Download

Free · no card · no tracker · 100% local

Email

Anoni reads your email. And says what it didn’t open.

Drop an .eml. Anoni reads what your mail client shows: headers, body, forwarded message. Not the attached files.

share-transfer.emlHandled locally
From
To
Cc
SubjectShare transfer
Attached message
Attachments
  • draft-agreement.pdfnot opened
  • id-documents.pdfnot opened

Anoni doesn’t open them.

It writes their names and their number into the text, nothing else.

An email opened in Anoni: the headers, the body and the attached message are handled; the two attached files are named and left closed. The display name counts as much as the address. The body is read as plain text or as HTML.

What you get back is the anonymized text of the message, not an .eml. Outlook’s .msg is not supported. Word, Excel, PDFs and images come back in their own format.

Redaction

Names stop here.

The text is removed, not hidden.

Security

Your documents never leave.

All the work happens on your machine. It’s not a box to tick. It’s the only way Anoni runs. Pull the Wi-Fi: nothing stops.

99.0% of sensitive characters covered · 94.8% strict recall

See the benchmark

  • Everything stays on your machine

    Detection and anonymization run locally. No document or excerpt is sent online. Only the very first launch downloads the engine, once.

  • Reversible, but encrypted

    The mapping between fake name and real value is encrypted with AES-256-GCM, derived from your passphrase. Without it, nobody decodes. You included.

  • Two modes, your call

    Reversible pseudonymization through the vault, or plain redaction: a PDF with real black bars and no way back.

  • No trace of your documents

    One email at activation, a license check at launch. No tracker, not a single file collected.

Frequently asked

What people ask us most.

Is Anoni GDPR-compliant?

Everything stays local and each run produces an anonymization report with no personal data, ready to keep on file. On a sensitive document, read it through first. The tool helps. It doesn’t decide for you.

What about HDS or ISO 27001 certifications?

They cover a hosting provider: how a company keeps your data on its servers. Anoni hosts nothing. Your documents stay on your machine, so there is no server to certify.

Is Anoni open source?

The app, no. But the models that do the detection are open (Apache-2.0, MIT): you can see what reads your documents.

The next document you hand to an AI, run it through Anoni first.

Free, on Mac, PC or Linux. A Pro edition is being considered.

No cardno tracker100% local