Send the prompt.
Keep the secrets.

Sensitive names, numbers and proprietary information are anonymized before your prompt reaches a frontier model — and restored only in your browser.

scrub ready

Reviewable anonymization

Sensitive entities are replaced with decoys — and you review the swap.

Encrypted scrubbing

Anonymization runs inside an encrypted, attested environment.

Local restoration

Original entities are restored only in your browser.

2 Review the scrub

Each real term is swapped for a stand-in. Edit anything the model missed or got wrong — changes re-apply instantly, no extra model call.

OriginalStand-inType
3 Cloaked prompt
This is all the frontier model ever sees.
4 Frontier reply (still cloaked)
5 Restored answer
Restored in your browser — the real terms never left this page after the scrub.