Enterprise-Grade Security, Consumer-Friendly Experience
Secure File Handling
Documents stay on your device. Text is extracted locally, sent to our secure API for PII detection, and anonymized documents are reconstructed on your machine.
- Documents stay on your device
- No document uploads — only text sent for analysis
- Works with sensitive internal documents
- Compliant with strict data policies
Zero-Knowledge Security Architecture
Two independent encryption layers protect your data. Local vault (history, tokens, keys): AES-256-GCM, key derived from your 24-word recovery phrase via Argon2id. Server-synced data (presets, entities): XChaCha20-Poly1305 via your ZK data key — the server stores only ciphertext. Your password is never sent: only SHA256(authKey) is transmitted for login.
- Password never leaves your device
- Local vault: AES-256-GCM + Argon2id
- Server data: XChaCha20-Poly1305
- 24-word BIP39 recovery phrase
- PIN-protected quick unlock (Argon2id)
- All keys zero-wiped from memory on logout
AI-Powered PII Detection
Leverage our cloud API to detect 320+ entity types across 48 languages with configurable confidence thresholds.
- 320+ entity types across 70+ countries
- 48 language support
- Adjustable detection threshold
- Context-aware recognition
Compliance-Ready Presets
Pre-configured detection profiles for GDPR, HIPAA, PCI-DSS, and more. Create custom presets for your specific needs.
- GDPR Compliance preset
- HIPAA Medical preset
- Financial Services preset
- Custom presets via web app
Reversible Encryption
Use encryption keys for reversible anonymization. Only you hold the keys - decrypt when needed while keeping documents safe.
- Create and manage encryption keys
- Apply encryption per entity type
- Keys stored only in your vault
- Decrypt anytime with your key
Multi-Format Support
Process PDF, Word, Excel, and text-based files. Convert between formats during anonymization.
- PDF (up to 50MB)
- DOCX (up to 30MB)
- XLSX (up to 20MB)
- TXT, CSV, JSON, XML
48 Languages
Interface and detection support for 48 languages. Switch languages instantly from the header.
- Full UI in 48 languages
- Multi-language entity detection
- Regional preset recommendations
- Instant language switching
Encrypted History
All your processing history stored locally in your encrypted vault. View, search, and use for deanonymization.
- View past anonymizations
- Copy original or anonymized text
- Use history for deanonymization
- Fully encrypted storage
Desktop App vs Web App
Choose the right tool for your workflow
| Feature | Desktop App | Web App |
|---|---|---|
| File processing | Local files + cloud analysis | Cloud-based |
| Maximum file size | 50MB | 25MB |
| Encrypted local history | Yes | No |
| Encryption keys | Local vault | Cloud sync |
| Bulk processing | Queue system | One at a time |
| Deanonymization | Built-in | Separate tool |
| Best for | Sensitive documents, compliance | Quick tasks, collaboration |
Frequently Asked Questions
Which file formats are supported?
The Desktop App processes plain text, PDF, DOCX, XLSX, and image files (PNG, JPEG, BMP, TIFF). Batch processing supports up to 5,000 files at once.
Does it work offline?
No. The Desktop App requires an internet connection — PII detection is performed by the cloak.business cloud API. Your files are never uploaded: text is extracted locally and only that text is sent for analysis. For a fully offline solution with no server connection, see our sister product anonym.plus.
How is my data stored locally?
Local data (history, API tokens, encryption keys) is stored in an encrypted vault using AES-256-GCM. The vault key is derived from your 24-word BIP39 recovery phrase via Argon2id. Data synced to the server (presets, entities) is separately encrypted with XChaCha20-Poly1305 using your ZK data key — the server stores only ciphertext it cannot decrypt.
Which platforms are supported?
The Desktop App is available for Windows (NSIS installer and MSI), macOS (Universal DMG supporting both Intel and Apple Silicon), and Linux (AppImage and .deb for Debian/Ubuntu). All platforms use the same detection engine and features.
How do I update the app?
The app includes auto-update via minisign signatures on macOS. On Windows, download the latest installer from your account dashboard. Updates are free for all users.
Is This Right for You?
Best For
- ✦Sensitive document workflows where raw files must not be uploaded to cloud storage
- ✦Legal and HR teams handling sensitive contracts, case files, and personnel records
- ✦Bulk processing of hundreds of local files with queue management and batch mode
- ✦Secure vault storage for anonymized files with AES-256-GCM encryption at rest
- ✦Windows and macOS users who need a native desktop experience
Not Ideal For
- ✦Server-side automation — use the API or batch processing endpoint instead
- ✦Headless or CI/CD environments without a desktop UI
- ✦Processing files over 1 GB — memory constraints apply on standard hardware
- ✦Teams needing centralized audit logs — the web app provides full activity history