Connect Your Cloud Storage
Microsoft 365
Browse OneDrive personal storage and SharePoint team sites. Supports Word, Excel, PowerPoint, and PDF documents. OAuth2 with delegated permissions — no admin consent required for personal use.
- OneDrive personal & SharePoint sites
- Word, Excel, PowerPoint, PDF
- Auto-save anonymized files back
Google Drive
Browse Google Drive files including native Docs, Sheets, and Slides (automatically exported to Office formats for analysis). Save anonymized plain-text results back to Drive.
- Google Docs, Sheets, Slides
- Auto-export to Office formats
- Upload results back to Drive
Dropbox
Full path-based navigation of your Dropbox (personal and Business). Analyze any supported document type and save anonymized versions with smart auto-rename.
- Personal & Business accounts
- Path-based folder navigation
- Auto-rename anonymized files
Nextcloud
Connect any self-hosted Nextcloud server via Login Flow v2. No client app registration required — uses WebDAV for file access. Perfect for on-premises data sovereignty.
- Any Nextcloud server URL
- No app registration needed
- WebDAV-based file operations
How It Works
Connect
Sign in with your cloud provider using secure OAuth2 (or Nextcloud Login Flow v2). Credentials are encrypted end-to-end and never stored in plaintext.
Browse & Select
Navigate folders, preview files, and select multiple documents for analysis. Supported formats: Word, Excel, PowerPoint, PDF, text files, and images.
Analyze
Each file is downloaded, text is extracted server-side, and analyzed by cloak.business's 317-recognizer PII engine across 48 languages.
Review & Anonymize
Review detected entities across all files. Exclude false positives, choose anonymization operators per entity type, and apply in one click.
Save Back
Anonymized files are saved back to your cloud storage automatically — same folder, new filename with suffix. Or download as a ZIP archive.
Security & Privacy
- OAuth tokens encrypted with AES-256-GCM before database storage
- No files stored on cloak.business servers — only text extracted for analysis
- Auto-refresh tokens without requiring re-authentication
- SSRF protection on all cloud API calls — only approved hostnames allowed
- clientSecret stays encrypted server-side — never exposed to clients
Frequently Asked Questions
Are my files stored on cloak.business servers?
No. Files are downloaded temporarily for text extraction and analysis, then discarded. Only the extracted text is processed. Your original files remain exclusively in your cloud storage.
Which file formats are supported?
Supported formats include Word (.docx), Excel (.xlsx), PowerPoint (.pptx), PDF, plain text, CSV, JSON, XML, Markdown, and image files (PNG, JPG, BMP, TIFF). Google Docs, Sheets, and Slides are automatically exported to their Office equivalents.
How are OAuth tokens secured?
All OAuth access and refresh tokens are encrypted with AES-256-GCM using a dedicated encryption key (ADDIN_ENCRYPTION_KEY) before being stored in the database. The key is never exposed to the browser or client applications.
Can I use SharePoint document libraries?
Yes. The Microsoft 365 addin supports both OneDrive (My Drive) and SharePoint document libraries. You can search SharePoint sites by name and select any document library within those sites.
Does the Nextcloud integration require special server configuration?
No. The Nextcloud addin uses Login Flow v2 which is built into every Nextcloud server (version 16+). No app registration or client credentials are required — just your server URL.