By George Curta ·
Anonymize Documents Securely
The anonym.legal Desktop App reads files on your device; detection runs on the EU-hosted API.
How It Works
The desktop app combines local file handling with cloud-powered analysis. Here's exactly what happens at each step.
You Open a File
Your ComputerDrag a PDF, Word, Excel, or text file into the app. The file is read directly from your disk.
The original file never leaves your device and is never uploaded to any server.
Text Is Extracted Locally
Your ComputerThe app extracts the raw text content from your document using local libraries.
For PDFs this means parsing text layers; for DOCX it means reading XML content. All done on your machine.
Text Sent for PII Detection
Cloud APIDetection runs on the EU-hosted API, reached over an encrypted TLS connection.
Our Presidio-based engine scans for 273 entity types (names, emails, phone numbers, etc.) and returns their positions.
Anonymization Applied
+Your Computer + Cloud APIBased on your preset and operators (encrypt, mask, hash, etc.), the detected entities are anonymized. Encryption keys never leave your vault.
The API returns anonymized text. If you use encryption, only your local vault holds the keys — we never see them.
Document Rebuilt Locally
Your ComputerThe anonymized text is inserted back into the original document format, preserving layout, fonts, and formatting.
The output file is saved to your chosen location. The original file remains untouched.
History Saved to Encrypted Vault
Your ComputerA record of what was anonymized is stored in your encrypted local vault for future reference or deanonymization.
The vault uses AES-256-GCM encryption with your 24-word recovery phrase. History is never synced to our servers.
The Desktop App reads files on your device; detection runs on the EU-hosted API over an encrypted connection. Settings and presets stay in the encrypted local vault.
Download for Your Platform
Version Latest
Windows
Windows 10 or later (64-bit)
macOS
macOS 10.15 (Catalina) or later
Linux
Ubuntu 20.04+, Debian 11+, or equivalent
Enterprise-Grade Security, Consumer-Friendly Experience
Secure File Handling
Documents stay on your device. Text is extracted locally, sent to our secure API for PII detection, and anonymized documents are reconstructed on your machine.
- Documents stay on your device
- Reads files on your device; detection runs on the EU-hosted API
- Works with sensitive internal documents
- Compliant with strict data policies
Military-Grade Vault Encryption
All your credentials, history, and encryption keys are protected with AES-256-GCM encryption, derived from a 24-word recovery phrase using Argon2id.
- AES-256-GCM encryption
- Argon2id key derivation
- 24-word BIP39 recovery phrase
- PIN-protected quick access
Hybrid PII Detection
Leverage our cloud API to detect 273 entity types across 48 languages using deterministic regex + NLP patterns.
- 273 entity types
- 48 language support
- Adjustable detection threshold
- Context-aware recognition
Compliance-Ready Presets
Pre-configured detection profiles for GDPR, HIPAA, PCI-DSS, and more. Create custom presets for your specific needs.
- GDPR Compliance preset
- HIPAA Medical preset
- Financial Services preset
- Custom presets via web app
Reversible Encryption
Use encryption keys for reversible anonymization. Only you hold the keys - decrypt when needed while keeping documents safe.
- Create and manage encryption keys
- Apply encryption per entity type
- Keys stored only in your vault
- Decrypt anytime with your key
Multi-Format Support
Process PDF, Word, Excel, and text-based files. Convert between formats during anonymization.
- Basic: PDF, DOCX, TXT, CSV — up to 5 MB
- Pro: all supported formats — up to 10 MB
- Business: all supported formats — up to 20 MB
- Free: text input only (no files)
48 Languages
Interface and detection support for 48 languages. Switch languages instantly from the header.
- Full UI in 48 languages
- Multi-language entity detection
- Regional preset recommendations
- Instant language switching
Encrypted History
All your processing history stored locally in your encrypted vault. View, search, and use for deanonymization.
- View past anonymizations
- Copy original or anonymized text
- Use history for deanonymization
- Fully encrypted storage
Desktop App vs Web App
Choose the right tool for your workflow
| Feature | Desktop App | Web App |
|---|---|---|
| File processing | Local files + cloud analysis | Cloud-based |
| Maximum file size | Depends on plan: 5 / 10 / 20 MB (Basic / Pro / Business) | Depends on plan: 5 / 10 / 20 MB (Basic / Pro / Business) |
| Encrypted local history | Yes | No |
| Encryption keys | Local vault | Cloud sync |
| Bulk processing | Queue system | One at a time |
| Deanonymization | Built-in | Separate tool |
| Best for | Sensitive documents, compliance | Quick tasks, collaboration |
Who Uses the Desktop App?
Legal Teams
Process contracts and legal documents securely — the Desktop App reads files on your device; detection runs on the EU-hosted API
Healthcare Providers
HIPAA Safe-Harbor de-identification recognizers; documents stay on your device (Customer responsibility for HIPAA compliance, separate BAA required for PHI processing)
Financial Institutions
Process banking documents with PCI-DSS ready presets and local encryption
HR Departments
Anonymize employee data for analytics while maintaining GDPR compliance
Research Institutions
De-identify research data with reversible encryption for authorized access
Government Agencies
Process sensitive documents with files remaining on your device and encrypted vault storage
Frequently Asked Questions
Is there a PII anonymization tool that works completely offline for air-gapped environments?
anonym.legal's Desktop App processes files locally via Tauri 2.0 — files never leave your device. However, PII detection requires internet connectivity as text extracted from files is sent to anonym.legal's EU-hosted API for analysis (no files are transmitted, only text content). No data is stored server-side. For fully air-gapped environments requiring zero network connectivity, see anonym.plus.
GDPR data sovereignty says our data can't leave Germany — how do we use cloud-based anonymization tools?
anonym.legal's infrastructure is hosted entirely in Hetzner data centers in Germany, so data never leaves EU/German jurisdiction. The Desktop App reads files on your device; detection runs on the EU-hosted API in Germany, and no data is stored server-side. This satisfies GDPR data residency requirements and German BDSG data sovereignty provisions.
From the Blog
View all articlesHIPAA MRN Detection Without a Regex PhD
Every hospital's MRN format is different. Memorial uses MRN:XXXXXXX, St. Mary's uses PT-YYYYY, University Hospital uses UHN-XXXXXXXXXX.
HIPAA: Hospital-Specific MRN Detection
HIPAA Safe Harbor requires removing medical record numbers — but MRN formats are not standardized. Epic, Cerner, and Meditech all use different formats.
HIPAA Safe Harbor De-ID at Scale
HIPAA Safe Harbor requires removing 18 specific PHI identifier categories. Academic medical centers need de-identification at scale but existing tools.
Ready to Protect Your Documents?
Download the desktop app and start anonymizing files in minutes. Included with your subscription.
Need Complete Offline Anonymization?
If you need a fully offline solution with no server connection, no credits, and unlimited anonymization, visit our sister product.
Visit anonym.plusLimitations / Important note
- Supported file types and OS versions are limited to those listed in the documentation.
- Detection is probabilistic; review high-stakes outputs before relying on them. This is not legal advice.