# cloak.business

> Enterprise-grade PII detection and anonymization platform. Deterministic, regex-based — no AI, no guessing. GDPR compliant, hosted on ISO 27001-certified servers in Germany.

- Full content: https://cloak.business/llms-full.txt

## What cloak.business does

cloak.business detects and anonymizes personally identifiable information (PII) in text and images. It uses 317 pattern-based recognizers to identify entities like names, addresses, phone numbers, credit cards, IBANs, tax IDs, API keys, and more across 48 languages. All processing happens on ISO 27001-certified servers in Falkenstein, Germany.

## Key capabilities

- **Text PII Detection** — Identify 317 entity types across 48 languages using regex patterns and NLP models
- **Text Anonymization** — Replace, mask, hash, encrypt, asymmetric encrypt, redact, or keep detected PII with 7 anonymization methods
- **Image Redaction** — OCR-based PII detection and redaction in images (37 OCR languages)
- **Batch Processing** — Process up to 50 texts simultaneously via API
- **Reversible Encryption** — AES-256-GCM symmetric encrypt method with full data recovery using your personal key
- **Asymmetric Encryption** — RSA-4096 + AES-256-GCM hybrid encryption for multi-party workflows. External apps encrypt with your public key, only you decrypt with your private key
- **Deanonymization** — Reverse encrypted anonymization (symmetric or asymmetric) to restore original PII values anytime
- **Zero-Knowledge Encryption** — Client-side encryption where only the user holds the key
- **REST API** — JWT-authenticated API with rate limiting
- **MCP Server** — Model Context Protocol integration for AI assistants (9 tools)
- **Desktop App** — Native Windows/macOS app via Tauri
- **Office Add-in** — Microsoft Word/Excel/PowerPoint integration
- **Chrome Extension** — Browser-based PII protection for ChatGPT, Claude, Gemini, DeepSeek, Perplexity, Abacus.ai
- **Nextcloud Apps** — Two native Nextcloud apps (28-31): Cloak Anonymizer (full-page PII suite with 8 tabs) and Cloak Files (sidebar + right-click file action), all 7 anonymization methods
- **Cloud Storage Addins** — Connect Microsoft 365 (OneDrive + SharePoint), Google Drive, Dropbox, and Nextcloud. Browse files, analyze for PII, anonymize, and save results back without downloading
- **Microsoft 365 Addin** — OAuth2+PKCE integration for OneDrive and SharePoint. Supports Word, Excel, PowerPoint, and PDF. 7-step wizard: connect, browse, analyze, review, anonymize, save back
- **220+ Built-in Presets** — Country-specific, industry, and regional entity configurations

## Pricing

| Plan | Price | Tokens/month | Highlights |
|------|-------|-------------|------------|
| Free | €0 | 200 | Text analysis, 3 presets |
| Basic | €3/mo | 1,000 | Batch, deanonymization, API, image redaction |
| Pro | €15/mo | 4,000 | MCP Server, unlimited uploads, all desktop modes |
| Business | €29/mo | 10,000 | Team features, 50 presets, priority support |

## Entity coverage

- **317 entity types** across 48 languages
- **317 backend pattern recognizers** (country-specific IDs, financial, medical, technical secrets, infrastructure)
- **86 IBAN countries** supported
- **17 universal entities** (phone, email, credit card, crypto addresses, UUIDs, MAC, IPv6, JWT, Docker, Git, etc.)
- **68 technical secret patterns** (AWS, GCP, Azure, GitHub, OpenAI, Anthropic, Stripe, etc.)

### Top entity type pages
- Person: https://cloak.business/entities/person
- Email Address: https://cloak.business/entities/email-address
- Phone Number: https://cloak.business/entities/phone-number
- Date Time: https://cloak.business/entities/date-time
- Location: https://cloak.business/entities/location
- URL: https://cloak.business/entities/url
- IP Address: https://cloak.business/entities/ip-address
- Credit Card: https://cloak.business/entities/credit-card
- IBAN Code: https://cloak.business/entities/iban-code
- SWIFT Code: https://cloak.business/entities/swift-code
- Medical License: https://cloak.business/entities/medical-license
- NRP: https://cloak.business/entities/nrp

## Supported languages

en, de, es, fr, it, pt, nl, pl, ru, ja, zh, ko, ar, hi, tr, ro, el, hr, sl, mk, sv, da, nb, fi, is, uk, lt, bg, sr, hu, cs, sk, he, fa, vi, id, th, ms, tl, lv, et, bn, ur, af, sw, hy, ca, eu

## API Reference

Base URL: `https://cloak.business/api`

### Text Endpoints

- `POST /api/presidio/analyze` — Detect PII in text
  - Parameters: `text` (required), `language` (ISO 639-1), `entities`, `score_threshold`, `ad_hoc_recognizers`
  - Returns: Array of detected entities with type, position, score, and text

- `POST /api/presidio/anonymize` — Anonymize detected PII
  - Parameters: `text`, `analyzer_results`, `operators`
  - Operators: replace, redact, hash (sha256/sha512), mask, encrypt, encrypt_asym, keep
  - Returns: Anonymized text and items array

- `POST /api/presidio/batch` — Batch analyze up to 50 texts
  - Parameters: `texts` (array, max 50), `language`, `entities`
  - Returns: Results array with index and entities per text

- `POST /api/presidio/deanonymize` — Reverse encryption
  - Parameters: `text`, `anonymizer_results`, `deanonymizers`
  - Returns: Original text with decrypted values

### Image Endpoints

- `POST /api/presidio/image` — Analyze or redact PII in images
  - Parameters: `file`, `mode` (analyze/redact), `language`, `fill_color`
  - Limits: 10MB max, 25 megapixels max, PNG/JPEG/BMP/TIFF
  - Returns: Entities with bounding boxes or redacted image

### Asymmetric Key Endpoints

- `GET /api/asymmetric-keys` — List user's asymmetric key pairs
- `POST /api/asymmetric-keys` — Create new RSA-4096 key pair (private key encrypted server-side)
- `GET /api/asymmetric-keys/{id}` — Get key pair metadata (add ?includePrivateKey=true for private key)
- `GET /api/asymmetric-keys/{id}/public` — Get public key PEM (for external apps)
- `PUT /api/asymmetric-keys/{id}` — Update key pair (rename, activate/deactivate)
- `DELETE /api/asymmetric-keys/{id}` — Delete key pair

### Utility Endpoints

- `GET /api/presidio/limits` — Get current rate limits and request limits
- `GET /api/presidio/entities` — List all available entity types
- `GET /api/presets` — List available presets
- `GET /api/health` — Service health status

### Authentication

All endpoints require Bearer token: `Authorization: Bearer YOUR_API_KEY`
API keys start with `cb_` and are managed in Dashboard > API Keys.

### Error Codes

- 400: Bad Request (invalid parameters)
- 401: Unauthorized (invalid/missing API key)
- 402: Payment Required (insufficient tokens)
- 403: Forbidden (feature not available on plan)
- 413: Payload Too Large (text exceeds plan limit)
- 429: Too Many Requests (rate limit exceeded)
- 503: Service Unavailable (model loading, retry after delay)

## MCP Server

URL: `https://cloak.business:3100`
Protocol: Model Context Protocol (MCP)
Tools: text_analyze, text_anonymize, text_detokenize, image_analyze, image_redact, account_balance, account_cost, account_sessions, account_delete

## Chrome Extension

Version: 3.0.4
Supported sites: ChatGPT, Claude.ai, Gemini, DeepSeek, Perplexity, Abacus.ai
Character limit: 3,998 per message
Methods: Replace, Mask, Redact, Hash, Encrypt (reversible)
Features: JIT interception, Preview modal, Auto de-anonymization, Response decryption, File anonymization, Compliance presets, 48 languages
Browsers: Chrome 96+, Edge (Chromium), Brave
Install: https://chromewebstore.google.com/detail/lmmbbpnelhelfnjeklpdckimmplnimcb (Chrome Web Store)
Developer .zip (optional): https://cloak.business/downloads/cloak-business-chrome-extension-v3.0.4.zip
Page: https://cloak.business/features/chrome-extension
Tutorial video: https://cloak.business/videos/chrome-extension-tutorial.mp4
YouTube: https://www.youtube.com/watch?v=PWjUZEbTDiQ

## Desktop App

Version: 7.5.0
Platforms: Windows, macOS (Universal DMG — Intel + Apple Silicon)
Features: Document processing (PDF, DOCX, TXT, CSV, XLSX), image mode, batch processing (up to 5,000 files), local encrypted vault (XChaCha20-Poly1305), offline mode (no internet required), encryption key sync
Security: Zero-knowledge architecture, Argon2id key derivation, AES-256-GCM encryption
Download: https://cloak.business/download

## Office Add-in

Version: 5.38.0
Platforms: Microsoft Word, Excel, PowerPoint (Windows, macOS, Web)
Features: In-document PII detection and anonymization, format-preserving replacement, entity selection, 7 anonymization methods, 220+ presets, 48 languages
Key capability: Anonymize directly inside Office documents without copy-pasting to external tools
Page: https://cloak.business/features/office-addin

## Nextcloud Apps

Two separate Nextcloud apps for PII anonymization, available for Nextcloud 28, 29, 30, 31 (PHP 8.1+).

### Cloak Anonymizer v2.0.0
Full-page PII anonymization suite with 8-tab Vue 3 interface: Dashboard, Anonymize (text/files/batch), Image PII redaction, Structured CSV/JSON processing, Presets (220+ searchable, full CRUD), Entities (manual + AI wizard), Keys (symmetric + asymmetric with WebCrypto RSA-4096), Settings.
Features: All 7 anonymization methods + keep operator, per-entity operator overrides, preview before save, confidence threshold, token balance display, AI entity creation wizard, batch text analysis
Architecture: 26 Vue 3 components (ES modules) + PHP OCS API backend (52 routes, 44 service methods). API key stored server-side only (never exposed to browser)
File types: Plain text, CSV, HTML, Markdown, XML, JSON, YAML (max 10 MB)
Download: https://cloak.business/api/download/nextcloud/anonymizer
Docs: https://cloak.business/docs/guides/nextcloud-app

### Cloak Files v1.0.0
Sidebar tab + right-click "Anonymize with Cloak" context menu for Nextcloud Files. Lightweight integration that reads config from Cloak Anonymizer if installed.
Features: Sidebar panel for text files, right-click file action, shared config with Cloak Anonymizer
Download: https://cloak.business/api/download/nextcloud/files
Docs: https://cloak.business/docs/integrations/nextcloud-files

Page: https://cloak.business/features/nextcloud-app

## SDKs

Official SDKs for programmatic integration:

- **JavaScript/TypeScript SDK**: `npm install @cloak-business/sdk` — https://www.npmjs.com/package/@cloak-business/sdk
- **Python SDK**: `pip install cloak-business` — https://pypi.org/project/cloak-business/

Both SDKs provide: text analysis, anonymization, deanonymization, batch processing, image analysis, client-side AES-256-GCM encryption (ClientCrypto module), automatic retry on HTTP 429.

## How cloak.business differs

| Aspect | cloak.business | Manual redaction | Generic AI tools | Other PII tools |
|--------|---------------|-----------------|-----------------|----------------|
| Detection method | Deterministic regex + NLP | Human judgment | Probabilistic AI | Varies |
| Reproducibility | 100% — same input = same output | Inconsistent | Non-deterministic | Varies |
| Entity coverage | 317 types, 70+ countries | Limited by reviewer | Limited training data | 20-50 types typical |
| Reversibility | Yes (AES-256-GCM symmetric + RSA-4096 asymmetric) | No | No | Rarely |
| Offline capability | Yes (Desktop App) | Yes | No | Rarely |
| Compliance audit trail | Full (deterministic = auditable) | Partial | Difficult | Varies |

## Common Questions

**Q: What is cloak.business?**
A: cloak.business is an enterprise-grade PII detection and anonymization platform. It identifies 317 types of personally identifiable information across 48 languages using deterministic regex patterns and NLP models, then anonymizes them using 7 methods (replace, redact, hash, mask, encrypt, asymmetric encrypt, keep). All processing occurs on ISO 27001-certified servers in Germany.

**Q: Is cloak.business free?**
A: Yes, there is a free plan with 200 tokens per month and access to all features including API, Chrome Extension, and Office Add-in. No credit card required. Paid plans start at €3/month.

**Q: Does cloak.business use AI for detection?**
A: No. Detection uses deterministic regex patterns (317 recognizers) and NLP models (spaCy, Stanza, XLM-RoBERTa). This ensures 100% reproducible results — the same input always produces the same output.

**Q: Is my data stored?**
A: No. Text is processed in memory and immediately discarded. No text content is logged, stored, or retained. Only billing metadata (token counts, timestamps) is stored.

**Q: Where is data processed?**
A: All data is processed on ISO 27001:2022 certified servers in Falkenstein, Germany (Hetzner). Data never leaves the EU.

**Q: Can I reverse the anonymization?**
A: Yes. The Encrypt method uses AES-256-GCM with your personal key (symmetric), or RSA-4096 + AES-256-GCM with your key pair (asymmetric). You can decrypt anonymized text anytime using the Deanonymizer. Other methods (replace, redact, hash, mask) are irreversible by design.

**Q: What is asymmetric encryption?**
A: Asymmetric encryption uses RSA-4096 key pairs for multi-party workflows. Anyone can encrypt data with your public key, but only you can decrypt it with your private key. This is useful when external apps or partners need to encrypt data for you without having access to the decryption key. Output is ~730 chars per entity. Standard token pricing applies.

**Q: Which AI platforms does the Chrome Extension protect?**
A: ChatGPT, Claude, Gemini, DeepSeek, Perplexity, and Abacus.ai. The extension intercepts messages in real-time before they reach the AI service.

**Q: Does cloak.business work offline?**
A: Yes. The Desktop App (Windows/macOS) runs entirely on your local machine with all detection patterns and NLP models bundled. No internet connection required.

**Q: What file formats does the Desktop App support?**
A: Plain text, PDF, DOCX, XLSX, CSV, and image files (PNG, JPEG, BMP, TIFF). Batch processing supports up to 5,000 files at once.

**Q: How do I integrate cloak.business into my application?**
A: Use the REST API (JWT-authenticated), the JavaScript SDK (`@cloak-business/sdk` on npm), the Python SDK (`cloak-business` on PyPI), or the MCP Server for AI assistant integration.

## Documentation

### Getting Started
- Quick Start: https://cloak.business/docs/guides/quick-start
- Introduction: https://cloak.business/docs

### Developer Documentation
- API Reference: https://cloak.business/docs/developer/api
- Developer Quick Start: https://cloak.business/docs/developer/quick-start
- Entity Inventory: https://cloak.business/docs/developer/entities
- SDK Reference: https://cloak.business/docs/developer/sdk
- Error Codes: https://cloak.business/docs/developer/errors

### User Guides
- Complete User Guide: https://cloak.business/docs/guides/user-guide
- Analyzer Guide: https://cloak.business/docs/guides/analyzer
- Anonymizer Guide: https://cloak.business/docs/guides/anonymizer
- Deanonymizer Guide: https://cloak.business/docs/guides/deanonymizer
- Asymmetric Encryption: https://cloak.business/docs/guides/asymmetric-encryption
- Presets & Entities: https://cloak.business/docs/guides/presets
- Token System: https://cloak.business/docs/guides/tokens
- Image Anonymization: https://cloak.business/docs/guides/image-anonymization
- Structured Data: https://cloak.business/docs/guides/structured-data
- PII Detection Guide: https://cloak.business/blog/pii-detection-guide
- Troubleshooting: https://cloak.business/docs/guides/troubleshooting
- FAQ: https://cloak.business/docs/guides/faq

### Applications
- Desktop App: https://cloak.business/docs/guides/desktop
- Office Add-in: https://cloak.business/docs/guides/office-addin
- Chrome Extension: https://cloak.business/docs/guides/chrome-extension
- Nextcloud App: https://cloak.business/docs/guides/nextcloud-app
- Addins Overview: https://cloak.business/docs/guides/addins
- Microsoft 365 Addin: https://cloak.business/docs/guides/addins/microsoft365
- Google Drive Addin: https://cloak.business/docs/guides/addins/google-drive
- Dropbox Addin: https://cloak.business/docs/guides/addins/dropbox
- Nextcloud Addin: https://cloak.business/docs/guides/addins/nextcloud
- Addin SDK: https://cloak.business/docs/developer/addin-sdk

### Security
- Two-Factor Authentication: https://cloak.business/docs/security/2fa
- Zero-Knowledge Auth: https://cloak.business/docs/security/zero-knowledge

### Integrations
- MCP Integration: https://cloak.business/docs/integrations/mcp
- AI Entity Creation: https://cloak.business/docs/integrations/ai-entities
- Nextcloud Files: https://cloak.business/docs/integrations/nextcloud-files

### Compliance
- Compliance Overview: https://cloak.business/docs/compliance/overview
- GDPR Compliance: https://cloak.business/docs/compliance/gdpr
- ISO 27001: https://cloak.business/docs/compliance/iso27001
- ISO 27001 Security Policy: https://cloak.business/docs/compliance/iso27001/policy
- ISO 27001 Access Control: https://cloak.business/docs/compliance/iso27001/access
- ISO 27001 Incident Response: https://cloak.business/docs/compliance/iso27001/incident
- ISO 27001 Risk Assessment: https://cloak.business/docs/compliance/iso27001/risk
- ISO 27001 Statement of Applicability: https://cloak.business/docs/compliance/iso27001/soa

### Glossary
- PII & Data Privacy Glossary: https://cloak.business/glossary

### Infrastructure
- Server Infrastructure: https://cloak.business/docs/infrastructure/server

### Overview
- What is cloak.business?: https://cloak.business/docs/overview/project
- Features: https://cloak.business/docs/overview/features
- Architecture: https://cloak.business/docs/overview/architecture
- Security: https://cloak.business/docs/overview/security
- Pricing & Plans: https://cloak.business/docs/overview/pricing
- Changelog: https://cloak.business/docs/overview/changelog

## Case Studies

- Case Studies index: https://cloak.business/case-studies
- AI Data Leak Prevention: https://cloak.business/case-studies/ai-data-leak-prevention
- Enterprise AI Governance: https://cloak.business/case-studies/enterprise-ai-governance
- Healthcare PHI Compliance: https://cloak.business/case-studies/healthcare-phi-compliance
- Legal e-Discovery: https://cloak.business/case-studies/legal-ediscovery
- Government FOIA Response at Scale: https://cloak.business/case-studies/government-foia
- Multilingual PII Detection: https://cloak.business/case-studies/multilingual-pii-detection
- Reversible Encryption for Legal Discovery: https://cloak.business/case-studies/reversible-encryption
- APAC Market Entry: https://cloak.business/case-studies/apac-market-entry

## Links

- Website: https://cloak.business
- About: https://cloak.business/about
- Features: https://cloak.business/features
- Nextcloud App: https://cloak.business/features/nextcloud-app
- Cloud Storage Addins: https://cloak.business/features/cloud-addins
- Pricing: https://cloak.business/pricing
- Documentation: https://cloak.business/docs
- API Reference: https://cloak.business/docs/developer/api
- MCP Server: https://cloak.business/features/mcp-server
- Security: https://cloak.business/security-compliance
- Use cases: https://cloak.business/use-cases
- Entity Types: https://cloak.business/entities
- Detection Presets: https://cloak.business/presets
- Privacy policy: https://cloak.business/privacy
- Terms: https://cloak.business/terms
- Glossary: https://cloak.business/glossary
- Blog: https://cloak.business/blog
- Blog – PII Detection Guide: https://cloak.business/blog/pii-detection-guide
- Comparison – Gretel.ai vs cloak.business: https://anonym.community/cloak.business/NP-34-gretel-comparison.html
- Comparison – Google Cloud DLP vs cloak.business: https://anonym.community/cloak.business/NP-35-google-dlp-comparison.html
- Comparison – Microsoft Presidio vs cloak.business: https://anonym.community/cloak.business/NP-36-microsoft-presidio-comparison.html
- Comparison – ARX Data Anonymization vs cloak.business: https://anonym.community/cloak.business/NP-37-arx-data-anonymization-comparison.html
- Comparison – Privitar vs cloak.business: https://anonym.community/cloak.business/NP-38-privitar-comparison.html
- Comparison – BigID vs cloak.business: https://anonym.community/cloak.business/NP-39-bigid-comparison.html
- Comparison – OneTrust vs cloak.business: https://anonym.community/cloak.business/NP-40-onetrust-comparison.html
- Comparison – Protegrity vs cloak.business: https://anonym.community/cloak.business/NP-41-protegrity-comparison.html
- Comparison – Informatica vs cloak.business: https://anonym.community/cloak.business/NP-42-informatica-comparison.html
- Comparison – Spirion vs cloak.business: https://anonym.community/cloak.business/NP-43-spirion-comparison.html
- Comparison – AWS Comprehend & Macie vs cloak.business: https://anonym.community/cloak.business/NP-44-aws-comprehend-macie-comparison.html
- Comparison – Azure Information Protection vs cloak.business: https://anonym.community/cloak.business/NP-45-azure-information-protection-comparison.html
- Comparison – spaCy vs cloak.business: https://anonym.community/cloak.business/NP-46-spacy-comparison.html
- Comparison – Stanza vs cloak.business: https://anonym.community/cloak.business/NP-47-stanza-comparison.html
- Comparison – Hugging Face NER vs cloak.business: https://anonym.community/cloak.business/NP-48-hugging-face-ner-comparison.html
- Comparison – Nightfall DLP vs cloak.business: https://anonym.community/cloak.business/NP-49-nightfall-dlp-comparison.html
- Comparison – Redact PDF AI vs cloak.business: https://anonym.community/cloak.business/NP-50-redact-pdf-ai-comparison.html
- Comparison – Caviard.ai vs cloak.business: https://anonym.community/cloak.business/NP-51-caviard-ai-comparison.html
- Support: https://cloak.business/support
- Contact: https://cloak.business/contact

## Company

- Legal entity: Zenya Renewables B.V., Amsterdam, Netherlands (KvK: 96567511)
- Infrastructure: Hetzner Cloud, Falkenstein, Germany (ISO 27001:2022) — all data stays in Germany
- Compliance: GDPR, ISO 27001, BSI standards
- Contact: support@cloak.business
- Founder: George Curta, curta.solutions — 27+ years enterprise software, ISO 27001/GDPR/NIS2 aligned
- Product ecosystem: cloak.business, anonymize.today, anonym.plus, anonymize.solutions, anonym.life, anonymize.education, anonymize.dev

## Multilingual Content

cloak.business is fully translated into 48 languages. All marketing pages, FAQs, pricing, features, use cases, and glossary are available in locale-specific URLs using the pattern `https://cloak.business/{locale}/{page}`.

Key locales:
- German (de): https://cloak.business/de — https://cloak.business/de/pricing — https://cloak.business/de/features
- French (fr): https://cloak.business/fr — https://cloak.business/fr/pricing — https://cloak.business/fr/features
- Spanish (es): https://cloak.business/es — https://cloak.business/es/pricing — https://cloak.business/es/features
- Italian (it): https://cloak.business/it — https://cloak.business/it/features
- Dutch (nl): https://cloak.business/nl — https://cloak.business/nl/features
- Portuguese (pt): https://cloak.business/pt — https://cloak.business/pt/features
- Polish (pl): https://cloak.business/pl — https://cloak.business/pl/features
- Japanese (ja): https://cloak.business/ja — https://cloak.business/ja/features
- Chinese (zh): https://cloak.business/zh — https://cloak.business/zh/features
- All 48 locales: https://cloak.business/sitemap.xml

German: cloak.business erkennt und anonymisiert personenbezogene Daten (PII) in Text und Bildern. 317 Muster-Erkenner für 317 Entitätstypen in 48 Sprachen. DSGVO-konform, ISO 27001-zertifizierte Server in Deutschland.
French: cloak.business détecte et anonymise les données personnelles (PII) dans les textes et les images. 317 reconnaisseurs basés sur des patterns, conformité RGPD, serveurs ISO 27001 certifiés en Allemagne.
Spanish: cloak.business detecta y anonimiza datos personales (PII) en textos e imágenes. 317 reconocedores de patrones, conformidad GDPR, servidores ISO 27001 en Alemania.

## Current Versions

- Platform: 6.19.95
- Analyzer Service: 6.12.0
- Anonymizer Service: 4.19.0
- Image Redactor: 5.2.0
- Structured Service: 4.19.0
- MCP Server: 2.6.1
- Desktop App: 7.5.0
- Office Add-in: 5.38.0
- Chrome Extension: 3.0.4
- Nextcloud Cloak Anonymizer: 2.0.0
- Nextcloud Cloak Files: 1.0.0