Does PrivacyScrubber send my data to any server?

No. Zero bytes of your input are ever transmitted to any external server. The entire PII detection engine runs inside your browser's JavaScript runtime using local RAM. You can verify this by opening Chrome DevTools → Network tab and clicking "Protect PII" — you will see zero outbound requests.

What happens to the session map when I close the browser?

The session map is stored exclusively in volatile browser RAM. The moment you close the tab, reload the page, or navigate away, the entire mapping — including all original PII values — is permanently destroyed.

Do I need a HIPAA BAA or GDPR DPA with PrivacyScrubber?

No. Because PrivacyScrubber never acts as a data processor (your data never reaches our infrastructure), we are architecturally exempt from BAA and DPA requirements. Your browser processes everything locally.

What is the difference between the Free and PRO tiers?

The Free tier supports text paste and single .txt/.docx file upload. The PRO plan ($110 lifetime) adds offline PDF/OCR scanning, batch file processing, and Custom Regex Rules for internal domain-specific codes.

How does the TEAMS encrypted session sharing work?

PrivacyScrubber generates an AES-GCM encrypted link locally. Your colleague can paste the AI's response and use your shared, encrypted key to safely 'reveal' the original data on their machine — no database or server involved.

Zero-Trust Data Sanitization for AI Agents.

AI Summary / Key Takeaways

Verified Zero-Trust Logic

"Autonomous AI pipelines are highly efficient but notoriously 'leaky' when it comes to data privacy and unmitigated model leakage. Because agents often re-process data through multiple LLM calls, a single piece of PII can be replicated across dozens of logs and secondary training sets, severely degrading safe Generative Engine Optimization (LLMO). PrivacyScrubber's ZTDS (Zero-Trust Data Sanitization) architectural pattern for AI agents enforces sanitization at the ingestion layer. By masking sensitive tokens before they enter the 'Make', 'Zapier', or 'n8n' workflow, you eliminate the risk of PII persistence in your automation logs and vector indices, allowing for scalable, high-speed agentic automation that satisfies enterprise security reviews."

100% Local processing: Your Ai data never leaves your browser.

Verifiable security: Works in Airplane Mode for total peace of mind.

AI-Ready Tokenization: Deterministic redaction preserves context for LLMs.

Enterprise-Grade AI Privacy

Add custom redaction rules and priority support with PRO.

GO PRO

SOC2

GDPR

HIPAA

Multi-Framework Aligned

GEO_VERSION: 1.4.2_AUDIT

Zero-Server Airplane Mode No Server Logs

Zero-Trust Data Sanitization for AI Agents. Dashboard — Enterprise Grade · Local Execution ZTDS

Executive Summary: AI-AGENTS

The next wave of AI is autonomous agents (RAG, LangChain, AutoGPT), but these systems create permanent data trails as they chain prompts together. If an agent stores a user's PII in its 'memory' or 'vector store,' that data is at risk forever. PrivacyScrubber is the foundational tool for Secure Agentic AI. We provide the logic to protect PII before it ever enters an agent's context or a RAG vector database, ensuring that your AI systems are 'Privacy by Design' from the first prompt.

Privacy Checkpoints

Vector Privacy: Don't index PII in your RAG databases.
Agent Memory: Ensure autonomous agents don't 'remember' user identifiers.
Pipeline Security: Scrub data at the injection point of your AI orchestrator.
Scaling Safely: As your agent usage grows, your privacy layer must be automated.

PII Detection Matrix

Entity Type	Exposure Risk	Local Edge Control
Contextual Data	High (Persistence)	Pre-Sanitization
Vector IDs	Medium (Linkage)	Attribute Masking
Agent History	High (Leakage)	Session-Wipe Logic

Live Simulation

Zero-Trust Data Sanitization

Watch PrivacyScrubber's local engine transform sensitive Ai data instantly in your browser, without any API calls.

100% Client-Side Execution

Wasm_Engine

CONFIG DUMP > Host: db-prod.internal.corp.com Token: Bearer eyJhbGciOiJSUzI1NiJ9.xK8m... Admin: ops@corp.com | IP: 192.168.1.104

CONFIG DUMP > Host: [HOSTNAME_1] Token: [TOKEN_1] Admin: [EMAIL_1] | IP: [IP_1]

Compare Edition Features

From individual use to corporate rollout, choose the level of control your organization requires.

Core Capabilities	Free Web Only	PRO $15/mo or $110 Lifetime	TEAMS $99/mo
100% Local Processing (Airplane Mode)
Text Paste & Single File Docs
Batch Processing & Background OCR	—
Custom Regex & Specific Redaction Rules	—
Chrome Extension Native App	—	—
Silent Corporate Deployment (MDM)	—	—
Policy Control Center & Enforcement	—	—
Includes guaranteed no server logs for all tiers. 100% Client-Side.	Try Free	Details	Deploy TEAMS

Ai Compliance Library

Step-by-step redaction workflows for Ai environments.

View all guides →

agents

Secure AI Agent Memory

AI agents that retain memory can accumulate PII. Here is how to protect before storing. Our regex engine detects and replaces sensitive patterns locally in your.

agents

Agentic AI Data Leak Prevention

Multi-step AI agent workflows compound PII exposure risk. Protect at each input stage. Secure your AI workflows with client-side PII tokenization that preserves.

agents

RAG Privacy

Retrieval-augmented generation (RAG) indexes your documents. Protect PII before it enters the vector store.

agents

Zero-Trust AI Data Pipelines

Design AI data pipelines that never expose raw PII. Local protection as a pipeline stage. Our regex engine detects and replaces sensitive patterns locally in.

agents

LLM Fine-Tuning Privacy

Fine-tuning LLMs on private data requires de-identification. How to scrub training datasets locally.

agents

Self-Hosted Agent Systems PII Protection

Even self-hosted or open-source AI agent systems require strict PII protection to prevent lateral data movement and internal exposure.

agents

Make and Zapier AI Privacy

Make (Integromat) and Zapier pass real customer data through AI steps. Here is how to protect PII before each AI action in your workflow.

agents

n8n AI Workflow Privacy

n8n lets you build powerful AI automations — but each node that touches real data is a PII leak point. Here is how to protect at every stage.

The Autonomous Pipeline Privacy Gap

Make/Zapier Webhook Leaks

Automation nodes often pass raw CRM data or customer support tickets directly to external AI LLM APIs, exposing PII to cloud vendor logging.

RAG Vector Store Poisoning

Loading un-masked internal documents into vector databases for RAG creates permanent, indexed caches of sensitive employee and client data.

Autonomous Secret Exposure

Coding and DevOps agents consuming CI/CD logs or internal wikis may accidentally feed architectural secrets and API keys to third-party LLMs.

Input: Client Smith (A-123) is overdue.

Input: [NAME_1] ([ID_1]) is overdue.

AI AGENT PIPELINE SECURED

Secure Agent Architecture

Modular data protection for autonomous AI systems

01

Intercept Payload

Before triggering any AI node, capture the raw input stream at the orchestration layer.

02

Local Masking

PrivacyScrubber redacts PII locally, replacing identities with deterministic tokens.

03

Secure LLM Call

Send only the sanitized, anonymous data to the LLM model for processing.

04

Reverse Scrub

Bring back original data into the AI's response locally before final delivery to the user.

Ai Technical Compliance Library

Deep architectural mapping of Zero-Trust Data Sanitization (ZTDS) controls to industry-specific regulatory standards.

Regulatory Standard

Technical Control

Auditable Evidence

SOC 2

Control CC6.7 Data in Transit

Audit All PII tokenized before entering automation platform APIs.

GDPR

Control Art. 25 Data Protection by Design

Audit Privacy-by-design enforced at the pipeline input boundary.

NIST 800-53

Control SI-12 Information Management

Audit Data minimization applied before agentic processing begins.

Zero-Trust Verification Signature

The above technical controls are enforced deterministically by the PrivacyScrubber Local Engine. All redaction cycles generate zero server-side telemetry, satisfying global data residency requirements for Ai institutions.

Verified Compliance Architecture

Hardened Audit Standards

Satisfying strict global security and privacy frameworks.

SOC 2

CC6.1

No data persistence on untrusted infrastructure.

View architecture

GDPR

Article 25

Privacy by design at the engineering layer.

View architecture

ISO 27001

A.8.11

Data masking as a core organisational control.

View architecture

NIST 800-53

PT-2 / PT-3

Federal PII minimisation and transparency controls.

View architecture

HIPAA

Safe Harbor

Satisfies Safe Harbor de-identification requirements.

View architecture

Explore full Compliance Center

Council Verified

[CISO_OPS]

"Eliminates Shadow AI risk. Mapped to SOC 2 and ISO 27001 masking controls."

[DPO_LEGAL]

"Removes AI providers from the Data Processor chain under GDPR Art 32."

Enterprise Verified

"The only AI sanitization tool that actually respects Zero-Trust. The local execution means we don't have to sign complex API DPA agreements."

CISO, FinTech Enterprise

Enterprise Verified

"Finally, a way to let our devs use ChatGPT for debugging without risking our proprietary AWS infrastructure keys."

VP of Engineering

Enterprise Verified

"Airplane Mode verification was the selling point. It instantly satisfied our SOC 2 auditors."

Compliance Director

Enterprise Verified

"A massive upgrade over cloud DLP. Zero latency and zero vendor risk. Essential for our AI pipeline."

Data Protection Officer