Nextcloud Apps for PII Anonymization

Two complementary apps for Nextcloud. Cloak Anonymizer is the full-page PII detection and anonymization suite. Cloak Files adds sidebar and right-click integration into Nextcloud Files.

Two Apps, One Mission

Install both for the complete experience, or just the one you need

Cloak Anonymizer

v2.0.0

Full-Page PII Anonymization Suite

Standalone app with 8-tab interface: Dashboard, Anonymize (3 modes + batch), Image PII redaction, Structured CSV/JSON, Presets management, Custom Entities with AI wizard, Encryption Key management, and Settings.

  • 8-tab interface with Dashboard
  • 3 modes: Analyze, Anonymize, Decrypt
  • Image PII detection and redaction
  • Structured CSV/JSON processing
  • Preset CRUD + public library
  • Custom entity creation with AI wizard
  • Symmetric + asymmetric key management
  • Batch text analysis (up to 10 texts)

Cloak Files

v1.0.0

Files Integration

Lightweight companion app that integrates PII anonymization directly into Nextcloud Files. Sidebar tab for quick analysis and a right-click context menu for instant access.

  • Sidebar tab in Nextcloud Files
  • Right-click “Anonymize with Cloak” action
  • Auto-loads file content in sidebar
  • Shared API key with Cloak Anonymizer
  • Supports all text-based file types
  • No navigation entry — zero UI clutter

Developer Preview — Free Download

Both apps are fully functional and ready to use. Download the tarballs and install manually. Nextcloud App Store publication is coming soon.

  • Cloak Anonymizer v2.0.0 — 8-tab UI with 26 Vue components and 51 API endpoints
  • Cloak Files v1.0.0 — Sidebar tab + right-click file action
  • Fully tested: 105 PHPUnit tests + 160 E2E tests = 265 total
  • Compatible with Nextcloud 28, 29, 30, and 31

Supported Nextcloud Versions

Compatible with the four most recent Nextcloud major releases

Nextcloud 28

Supported

Nextcloud 29

Supported

Nextcloud 30

Supported

Nextcloud 31

Supported

Cloak Anonymizer Features

Everything you need to protect sensitive data in your Nextcloud instance

3 Modes: Analyze, Anonymize, Decrypt

Unified Anonymize tab with mode toggle. Analyze text to detect PII, anonymize with per-entity operator config and entity review, or decrypt previously encrypted data.

Image PII Redaction

Upload images (PNG, JPG, BMP, TIFF, WebP) to detect PII with bounding box visualization. Redact detected entities with configurable fill color.

Structured CSV/JSON

Process CSV and JSON files with per-column entity configuration. Auto-detect columns, preview first 5 rows, download anonymized output.

Preset Management

220+ built-in presets plus full CRUD for your own. Browse and import from the public preset library. Toggle favorites for quick access.

AI Entity Creation

5-step AI wizard to generate custom regex patterns from examples. Manual editor with live regex tester. Browse and import from the public entity library.

Full Key Management

Create, view, copy, and delete symmetric (AES-256-GCM) and asymmetric (RSA-4096) keys. Generate RSA key pairs in-browser via WebCrypto. View PEM data.

Batch Text Analysis

Analyze up to 10 texts in a single API call. Add/remove input fields dynamically, process all at once with combined results.

Dashboard & Token Balance

At-a-glance dashboard showing token balance, quick-action buttons, and usage summary. Monitor API consumption directly in Nextcloud.

7 Anonymization Methods

Choose the right method for your compliance requirements — per entity type

Replace

<PERSON>, <EMAIL>

Redact

Complete removal

Mask

J*** D**

Hash

SHA-256

Encrypt

AES-256-GCM

Asymmetric Encrypt

RSA-4096

Keep

Skip entity

Supported File Types

Works with text-based files up to 10 MB

Plain Text

.txt

CSV

.csv

HTML

.html

Markdown

.md

XML

.xml

JSON

.json

YAML

.yaml

Source Code

text/*

How It Works

1

Install both apps and configure your cloak.business API key in Cloak Anonymizer Settings

2

Open the Cloak Anonymizer app from the top navigation — or right-click a file in Files

3

Use the Anonymize tab to analyze text, review detected entities, and apply operators

4

For images: upload to the Image tab to detect and redact PII with bounding boxes

5

For CSV/JSON: use the Structured tab with per-column entity configuration

6

Manage encryption keys, presets, and custom entities from their dedicated tabs

Current & Planned Features

v2.0.0 (Current)

  • 8-tab UI: Dashboard, Anonymize, Image, Structured, Presets, Entities, Keys, Settings
  • 3 anonymize modes: Analyze, Anonymize, Decrypt with text/files/batch input
  • Image PII detection with bounding box overlay and redaction
  • Structured CSV/JSON processing with per-column configuration
  • Full CRUD for presets, custom entities, and encryption keys
  • AI-powered entity creation wizard (5-step, 3 providers)
  • WebCrypto RSA-4096 key generation in browser
  • Public library import for presets and entities
  • 7 anonymization methods + per-entity operator config
  • 220+ built-in presets including 85+ country presets
  • Cloak Files sidebar tab + right-click file action
  • 265 automated tests (105 PHPUnit + 160 E2E)

Roadmap

  • Nextcloud App Store publication
  • Dark mode support
  • Settings panel i18n (48 languages)
  • PDF and DOCX file support
  • Admin settings for organization-wide API key
  • Nextcloud Flow integration for automated anonymization

Installation

1

Download cloak_anonymizer and cloak_files tarballs from the releases page

2

Extract both to your Nextcloud custom_apps/ directory

3

Set permissions: chown -R www-data:www-data cloak_anonymizer/ cloak_files/

4

Enable in Settings > Apps: “Cloak Anonymizer” and “Cloak Files”

5

Configure your API key in Cloak Anonymizer Settings tab

Requirements

Supported

  • Nextcloud 28, 29, 30, or 31
  • PHP 8.1 or higher
  • PHP extensions: json, mbstring, xml, curl

Required

  • cloak.business account (free plan works)
  • API key from cloak.business dashboard
  • Server with outbound HTTPS access to cloak.business

Nextcloud Apps FAQ

Are the Nextcloud Apps free?

Both apps are free and open-source (AGPL). They connect to the cloak.business API, which has a free plan with 200 tokens per month. Paid plans start at €3/month for more tokens.

What is the difference between Cloak Anonymizer and Cloak Files?

Cloak Anonymizer is the full-page app with 8 tabs (Dashboard, Anonymize, Image, Structured, Presets, Entities, Keys, Settings). Cloak Files adds two integration points in Nextcloud Files: a sidebar tab and a right-click action. Install both for the complete experience.

Which Nextcloud versions are supported?

Nextcloud 28, 29, 30, and 31. Both apps require PHP 8.1 or higher with json, mbstring, xml, and curl extensions.

What file types can I anonymize?

Text-based files up to 10 MB: plain text, CSV, HTML, Markdown, XML, JSON, YAML, and any text/* MIME type. Image files (PNG, JPG, BMP, TIFF, WebP) can be processed in the Image tab.

What anonymization methods are available?

All 7 methods: Replace (type labels), Redact (remove), Mask (partial), Hash (SHA-256), Encrypt (AES-256-GCM, reversible), Asymmetric Encrypt (RSA-4096, reversible), and Keep (skip). You can set a different operator per entity type.

Can I create custom entity types?

Yes. Use the Entities tab to create custom entities manually with regex patterns, or use the 5-step AI wizard that generates regex patterns from examples using OpenAI, Anthropic, or Abacus.ai.

Where is my data processed?

Text is sent to the cloak.business API on ISO 27001-certified servers in Falkenstein, Germany. Data is processed in memory and immediately discarded — nothing is stored or logged.

Can I manage encryption keys in Nextcloud?

Yes. The Keys tab provides full CRUD for symmetric (AES-256-GCM) and asymmetric (RSA-4096) keys. You can generate RSA key pairs in-browser via WebCrypto, view PEM data, copy keys, and toggle active status.

Is the Nextcloud App available on the Nextcloud App Store?

Not yet. Both apps are currently in Developer Preview with free downloads. Nextcloud App Store publication is on the roadmap.

Can I use the Nextcloud apps with other cloak.business products?

Yes. All cloak.business products (Nextcloud, Desktop App, Chrome Extension, Office Add-in, Web App) share the same account, token balance, encryption keys, presets, and custom entities.

Anonymize Files in Nextcloud

Download the Developer Preview and start protecting sensitive data in your Nextcloud instance today.