100% Offline Document Anonymizer

Use AI on your sensitive files safely and fully offline.

promptShield removes sensitive information from your documents before you share them with any AI. It works locally, in seconds, and never uploads your data.

Download the app and start anonymizing right away. We don't even need your email.

Try it yourself: disconnect from the internet, then anonymize a document.

Works on PDF, Word, Excel, PowerPoint and more. Download encoded or redacted PDFs.

A 4-layer detection engine covering 70+ data types. Turn each layer on or off.

  • Patterns: emails, IDs, phone numbers and other structured data
  • Entities: names, organizations and locations
  • Expressions: your own words and phrases
  • Deep Analysis: an optional AI model that reads context

A library for all your documents, and a review window where you check every detection before you download.

Easy license management and compliance monitoring for every user.

Works with any AI. Send the encoded document, then decode the answer to get your real values back.

Mark the zones to hide once, then apply them to every document of the same kind.

Documents in the same folder share their codes, so a name gets the same code in all of them.

The confidentiality problem

Paste client data into a chatbot and it has left your hands. So has client confidentiality.

What sits on someone else's servers does not come back. It usually happens through Shadow AI: people reaching for AI tools nobody approved, because the work has to get done. The fix is to make AI safe to use on the work that matters, not to ban it.

One of them pasted a client document into a chatbot this morning. Nothing about them tells you which.

The avoiders

"We just don't paste client data into AI."

Real work stays outside AI. The productivity gap grows silently.

The risk-takers

"I'll paste it anyway. Nobody will know."

Shadow AI. One incident away from a compliance crisis.

The workarounds

"I manually delete names before I paste."

Time-consuming, error-prone, no audit trail, and it still makes the AI worse.

There's a fourth path.
Under 90 seconds

Two steps. That's the whole flow.

One pass finds what's sensitive and swaps it for safe codes. Restore it whenever you want, all on your own machine.

  • 01Protect

    Names, IDs and emails found and swapped for consistent codes the AI can follow, in one pass

  • 02Decode

    Restored to real names on your machine

The web app is built for a bigger screen. Open promptShield.ca on a laptop or desktop to try it live.

Works out of the box.

Every other tool that does this was built for developers. This one was built for you: download, open, protect your first document.

No codeNo setupNo ITNo cloud

Processed 100% offline. Disconnect your computer and try it.

Anonymize your documents, then restore the data

promptShield encodes sensitive data before it ever reaches an AI. Feed the protected document to any LLM, then decode the output to get real results, with zero data exposure.

From sensitive document to AI insight and back.

The complete workflow. Protect your document, put it to work with any AI, and bring real data back, all on your machine.

Built for how client work actually arrives

Your client's file keeps growing.Your AI conversation grows with it.

The Library is where every file lives: Protect, Decode, and your AI conversations all start from there. And because real work doesn't fit in a single document, group related files into a folder: the same entity then keeps the same code across every file in that folder, and across every conversation with your AI.

On your customer's side

Monday
First batch arrives
3 contracts · Alice Ng → [P0ABCD]
Friday
More files come in
+2 contracts · Alice → still [P0ABCD]
Next month
Addendum lands
+1 document · same entity, same code

In your AI conversations

Monday
"Summarize these contracts."
AI sees [P0ABCD] for the first time
Friday
"Compare the new ones to the originals."
Same thread · same [P0ABCD]
Next month
"Is the addendum consistent with the original?"
New session · still [P0ABCD]
[P0ABCD]persists across every document in the folder and every conversation.
Add files anytime

Drop new documents into the folder whenever your client sends them. They inherit the existing code registry instantly: no re-coding, no mental remap, no broken references.

Your AI keeps its memory

[P0ABCD] means the same person in Monday's chat and next month's chat. Your AI never loses the thread, even across sessions, weeks, or model upgrades.

One folder per client. One code per entity. Your tooling finally scales the way your client relationships actually grow.

Try the Library free
Clean by default

Protected files: 100% metadata-clean

Every file you export (PDF, Word, Excel, or image) leaves with its metadata wiped at the binary level, automatically and every time, with nothing to configure.

PDF
PDF Documents
  • Author, Title, Subject, Keywords
  • Creator & Producer software names
  • XMP (XML metadata) block
  • Table of contents / bookmarks
  • +5 more
DOCX
Word Documents
  • Author, LastModifiedBy
  • Title, Subject, Keywords, Category
  • Tracked changes (deleted / inserted text)
  • Inline comments & annotations
  • +2 more
XLSX
Excel Spreadsheets
  • Creator, LastModifiedBy
  • Title, Subject, Keywords, Category
  • Cell comments
  • Defined named ranges / formulas
IMG
Images (JPEG / PNG / TIFF)
  • All EXIF data (camera, GPS, date, serial)
  • IPTC metadata (caption, copyright, author)
  • XMP metadata block
  • ICC colour profiles
  • +1 more

Compliance, built in

Because your documents never leave your machine, the hardest parts of GDPR, HIPAA, and data-residency rules simply don't apply.

GDPR Compliant

No personal data is transmitted, stored, or processed externally. All sensitive data detection and redaction happens locally on your device.

HIPAA Ready

No PHI ever leaves the machine. Because PHI is never transmitted over the network, you need no BAA with promptShield.

Air-Gapped Processing

With Pro offline activation, and plan sync and crash reporting switched off, the desktop app makes no outbound request at all. Deploy it in secure environments, classified networks or air-gapped workstations.

Zero Data Retention

No documents, codes, or sensitive data are stored after processing. Nothing is logged, cached, or sent to any server, ever.

License management

Every license, under control

Track renewals, organize by tag, and keep base licenses out of the way, all from one dashboard.

Licenses6
  • sarah.mitchell@acme.cobase
    JARC-CEXUU-YUCQH-0798
  • sarah.mitchell@acme.cobase
    QVAB-FLBAZ-BMQBA-1750
  • e.collins@acme.colegal
    BECF-RZEUF-EJXSQ-5441
  • a.rahman@acme.co
    MVMT-ADWJS-GGLTQ-9926
  • o.bennett@acme.cofinance
    FQHK-PXDER-DPERA-9908
  • r.hughes@acme.co
    ZRTK-MNPQ-HWXZ-2847

Sample data shown for illustration purposes.

Manage every license from your browser

Track renewals, tag by department, and add seats in one click. No IT ticket, no provisioning scripts.

For compliance & DPOs

Hope is not a plan.

Buying anonymization software is step one. Unless you can see who's actually using it, you're just hoping the team is compliant, and hope is not a control.

Working solo? Skip ahead. promptShield works the same for individual users. This section is for teams that need to prove privacy rules are actually followed.
Seats
27
Compliant
22
Policy gaps
5
Pending
3
  • Sarah Mitchell
    Owner
    Today
  • James Whitaker
    Admin
    Today
  • Emma Collins
    Admin
    2 days ago
  • Marcus Johnson
    Member
    47 days ago
  • Aisha Rahman
    Admin
    5 days ago
  • Olivia Bennett
    Member
    Today

Sample data shown for demonstration. The live dashboard reflects real activity from your team.

Need this in front of your audit committee?

No sales call required. Forward the feature breakdown to your team. Every feature maps to GDPR Art. 32, HIPAA §164.312, SOC 2, and ISO 27001.

For compliance & DPOs

Every action, on the record.

When an auditor asks "who anonymized this document, and when?", the audit log answers in seconds. Every detection, encode, export, and decode is attributed, timestamped, and exportable.

Audit Log8,412
  • Anonymize
    sarah.mitchell@acme.co
    Today
  • Export
    sarah.mitchell@acme.co
    Today
  • Detect
    j.whitaker@acme.co
    Today
  • Anonymize
    e.collins@acme.co
    Yesterday
  • Decode
    a.rahman@acme.co
    Yesterday
  • Detect
    o.bennett@acme.co
    2 days ago

Sample data shown for demonstration. The live log reflects real activity from your team.

Need an audit trail your compliance team can stand behind?

No sales call required. Filter, search and export the full trail. The sample data above shows exactly what it records.

Simple, fair pricing

Try the desktop app free for 7 days. No account, no credit card. Upgrade when you're ready, cancel anytime.

MonthlyYearly
Most Popular
Desktop Basic
$29/mo
+ applicable tax
Licenses

For individuals and small teams. Your 2 personal device slots are always included.

Get Basic
  • Web app in your browser
  • Desktop app
  • 100% offline
  • All 70+ entity types
  • Multiple entity-recognition models
  • OCR for scanned docs
  • PDF & image files
  • MS-Office files (Word, Excel, PowerPoint)
  • Export redacted PDFs
  • Search for expressions with spreadsheet
  • Folder-based file linking
  • Trust Badge
Desktop Pro
$59/mo
+ applicable tax
Licenses

For teams needing central compliance and license management.

Get Pro

Everything in Desktop Basic +

  • Deep Analysis (local LLM)
  • CLI & self-hosted API
  • Audit log
  • License management dashboard
  • Compliance monitoring
  • Offline activation
Also available
Web Starter
$0Free forever

The full web app in your browser, free forever. Plus a 7-day trial of the desktop app, no account needed.

Launch web appDesktop only
  • Web app in your browser
  • All 70+ entity types
  • OCR for scanned docs
  • PDF & image files
  • Export redacted PDFs
  • Search for expressions with spreadsheet
Desktop Week Pass
$9/week
+ applicable tax

Full access for one week. 2 devices, email support included.

Get Week Pass

Secured payment with Stripe. Cancel anytime from your dashboard.

Every plan includes built-in in-app help, so you get answers without leaving the app.

Zero exposure. Zero compromise.

Your sensitive files, now safe for AI.

7-day free trial with no account, no credit card and no cloud. Anonymize your first document in under 2 minutes.

Start Free TrialDesktop onlySee How It Works