For the public sector

Disclosure starts with redaction.

Article L. 311-7 of the CRPA, the French code on public access to administrative documents, sets it out: a document holding severable protected passages is disclosed once they are redacted. Anoni does it on your machine, and the log keeps the record.

Obligations

Redact first, says the law.

These aren't our rules. They're the code's.

  • CRPA: article L. 311-7French administrative law is explicit. A document holding passages that cannot be disclosed is handed to the applicant once those passages are redacted or severed. Redaction is not a precaution here. It is what makes disclosure possible.
  • The State: June 2026The government's generative-AI guidance for civil servants lists “analysing a citizen's file” among the forbidden uses of free commercial AI tools, and advises agents, when in doubt, to anonymize the details before sending them.
  • CNIL: April 2025The data protection authority's “AI and public services” sandbox report names prompt-content minimization: what an agent types into a generative AI is kept to what is needed.

Sources: article L. 311-7 of the CRPA · French government guidance (June 2026) · CNIL sandbox report (April 2025).

Going further: what the CNIL means by pseudonymization and anonymization.

How it works

The document goes out, the people don't.

Anoni proposes, you approve, the file is read back. It all happens on the machine.

01

Open the document

A citizen's letter, the minutes of a council meeting, a report, a tender. PDF, DOCX, Excel, email, TXT, Markdown, CSV or image. Nothing leaves the machine.

02

Anoni finds

Names, addresses, national IDs, IBANs, contact details: proposed on screen, category by category. A scanned document goes through text recognition, locally.

03

You redact

You review, you adjust, you redact. Real black bars: the hidden text is removed from the PDF, not painted over. On a scan, black zones.

04

Anoni re-reads

Anoni reads the finished file back and looks for the redacted values in it. Anything still readable is flagged. The review stays yours.

In the administration

And for the rest of the work.

Built for real files, not for demos.

  • Before a generative AITo have a text summarized or rewritten: pseudonymization replaces every value with a believable stand-in, and the encrypted vault on your machine restores the real ones in the reply.
  • Before publishing onlineArticle L. 312-1-2 asks for more than redaction: a treatment that makes identification impossible. Anoni flags the remaining clues before you publish. An indication, not a guarantee: the call is yours.
  • The record to file (Pro)The compliance log exports to CSV, to JSON, or to a PDF register of processing, filtered on the period you choose. Enough to show what was done, without revealing what was in it.
Questions

Let’s be plain.

The three we get asked first.

A disclosure request comes in. Does Anoni redact on its own?

No, and it must not. Anoni proposes, you approve, detection by detection. Not everything gets redacted: the French access-to-documents commission has held that a council publishing the minutes of its deliberating body need not redact the names of the elected members speaking in that capacity (opinion 20191602). The tool speeds up the review. It does not decide what is disclosable.

Can an agent work on a citizen's file with ChatGPT?

Not with a free commercial tool: the government guidance lists that use among the forbidden ones. The file goes through Anoni, pseudonymized on the machine, and you decode the reply afterwards. The guidance carries no regulatory force of its own; the agent's duty of professional secrecy does (article L. 121-6 of the French civil service code).

What can I show my DPO?

How it works is verifiable. 100% local: cut the network, everything keeps running. No document leaves the machine. No tracker. Open detection models. The app itself is not open and never claims to be. An anonymization report in one click. With Anoni Pro, an exportable compliance log (CSV, JSON) and a PDF register of processing: date, mode, categories, counts, SHA-256 fingerprints, never the values.

Run your next request through Anoni.

Free, no subscription. Just an email.

Download

No card · no tracker · 100% local