ANONIMATOR
A local gateway between your people and cloud AI (ChatGPT, Claude, Copilot). It replaces personal data with placeholders before anything leaves your premises, then restores it in the answer.
The external AI provider receives no identifying data; the key never leaves your premises.
Your teams want cloud AI to summarise reports, review files and draft documents. But lab, study, research, teaching and administrative documents contain personal data: names, dates, contact details, AHV/AVS numbers, health information. Sending them to an external AI provider as they are is a risk.
Anonimator lets people keep working with the AI tools they already use. Personal data is pseudonymised on your own infrastructure before a request leaves, and the real data is put back into the answer when it returns.
Identities in your documents stay on your premises; the cloud AI only sees placeholders.
Purpose-aware policies give strict handling of health data and data about minors.
Same AI capabilities, with no identities shared with the AI provider.
Your people → Anonimator (on your premises) → cloud AI
Requests to ChatGPT, Claude or Copilot go through Anonimator, an OpenAI-compatible proxy on your premises.
Names, emails, phone numbers, IBAN, AHV/AVS, DNI/NIE, dates and plates are replaced: Anna Meier → [PERSON_7f3a]. If Anonimator can't check, nothing is sent.
The cloud AI answers with placeholders; Anonimator puts the real data back. The key is then destroyed.
| DIY toolkits (e.g. Presidio) | Cloud DLP (Google, AWS, Azure) | Anonimator | |
|---|---|---|---|
| Where your data is processed | Locally (library) | In the provider's cloud | On your premises |
| Fail-closed gateway in front of cloud AI | No, building blocks to assemble | No built-in AI proxy | Yes: nothing leaves unchecked |
| Real data restored in the AI answer | Only if you build it | Varies by service | Automatic |
| The re-identification key | Up to you | Data goes to the provider | Per query, RAM-only, then destroyed |
Other on-premise tools also keep data local. Anonimator's focus: one fail-closed gateway with a per-query, RAM-only mapping, not a toolkit you have to assemble.
| Anonimator (gateway) | Anonimator MCP | |
|---|---|---|
| What it does | Local gateway that pseudonymises personal data before prompts and documents reach cloud AI, and restores it in the answer. | Lets AI assistants and agents send documents and prompts through the local Anonimator gateway, so the external AI provider receives no identifying data; the key never leaves your premises. |
| Status | Pre-release · demo on request | Coming soon |
| Licence | Proprietary (closed source) | To be announced |
| Deployment | On-premise only, standard CPUs, OpenAI-compatible proxy | Works with the local Anonimator gateway |
| Flyer | Download flyer (PDF, EN) · ES | — |
| Security | Security policy | — |
| How to get it | Request a demo | Get notified |
Anonimator supports your obligations under the GDPR (data minimisation, pseudonymisation under Art. 4(5), security of processing under Art. 32) and the Swiss nLPD/revDSG. It helps with your data-protection obligations; it does not replace them.
Get in touch to request a demo of Anonimator for your organisation in Switzerland or the EU.
Request a demo Download flyer (PDF)Anonimator performs pseudonymisation (GDPR Art. 4(5)), not anonymisation: the data remains personal data for your organisation (CJEU, C-413/23 P). Anonimator helps with your data-protection obligations; it does not replace them. "Anonimator" is a working name. ChatGPT, Claude, Copilot and Presidio are trademarks of their respective owners.
Security policy · © Antonio Castellon · [email protected]