Redact PII before it ever leaves your machine.
OSSRedact is the gate between you and the closed models. Personal data is masked on the way out and restored on the way back, by a trained French-Quebec and English model that runs entirely on your own machine. The model is yours, on open weights.
- 0.9964
- detection recall, held-out
- 1.7 ms
- clean fast-path
- FR + EN
- Quebec + English PII
Internal note: client file, SIN <GOVERNMENT_ID_001>, account <PAYMENT_CARD_001>, call back at <PHONE_NUMBER_001> to confirm the balance.
Internal note: client file, SIN <GOVERNMENT_ID_001>, account <PAYMENT_CARD_001>, call back at <PHONE_NUMBER_001> to confirm the balance.
A privacy gateway, not just a regex.
The deterministic floor
Always on. The guaranteed catch, with no model in the path.
Always-on secrets floor
100% of 4,365 injected secrets caught, 0 decoy false positives.
Tier-0 structured PII
Structured categories caught deterministically.
caught deterministically · no model in the path
The on-device neural model
A trained model finds the rest, without your data ever leaving the machine.
On-device model detection
French-Quebec and English PII, on your CPU, GPU, or NPU.
model runs locally · no detection API call
Built for Quebec
SIN/NAS, Quebec addresses, bilingual text generic tools miss.
The round trip
Redact on the way out, rehydrate on the way back. The move nobody else has.
Stable entity map
Same value, same placeholder, so responses rehydrate losslessly.
same value → same placeholder, every time
Streaming rehydration
Placeholders split across stream tokens are reassembled mid-stream.
split across stream tokens, reassembled|
Per-project policy
Session overrides project. The secrets floor stays on.
A gateway you own, not a hop you rent.
Most ways to scrub PII send your text to someone else's server or stop at one-way redaction. OSSRedact keeps the detection, the model, and the data on your machine.
on your machine
a service you rent
The privacy comes from what is missing.
Other tools add encryption, dashboards, and certifications. OSSRedact removes the parts that leak: the server, the account, the telemetry, the egress.
Open the demo, turn off your wifi, and redact a sample. The browser console makes no requests, because nothing has to leave.
wifi connected still redacts
No detection API call
The model runs on your own CPU, GPU, or NPU.
No account, no telemetry
Nothing to sign up for, nothing phones home.
No data egress
Only typed placeholders ever reach the model.
No vendor lock
Open weights, yours to keep and to run.
Higher recall, far fewer false positives.
- 0.9964
- Detection recall
- 12
- False positives on clean text
on a 7,498-row held-out set, zero train overlap
versus Microsoft Presidio at 343 to 508
Recall is the leak-prevention rate, measured on held-out Quebec FR/EN sets against Presidio on the same sets and metric.
Real values out, tokens in -- before anything is sent.
Paste your own text and watch the swap happen, with an empty Network tab.