AI services log your files and data; protection BEFORE exposure is crucial
Cloud software for redaction is unacceptable, as data is still exposed
CamoText detects and masks sensitive text and metadata, fully offline
No cloud, APIs, nor internet. Nothing leaves your device
Paste text or load file(s)
Masked or redacted, metadata-free output
Review, adjust, and use
Fast, laptop-friendly, simple interface
No cloud servers, API calls, nor internet access: completely private and local on your device
Find and redact sensitive data and PII with a click
Powerful user settings with intuitive manual features
Trusted by law firms, medical practices, and public sector for GDPR, HIPAA, FISMA compliance
Zero data retention and metadata-free output
Desktop app
Command line
We offer bulk discounts, whitelabeling, custom data recognizers and features, automations, and more
See how CamoText can help you use the most powerful AI models while maintaining maximum privacy and control
Handle privacy first, locally (on-device). This means redacting personal identifying information (PII) and other confidential data before entering it into an AI system wherever possible, and also ensuring metadata and other identifiers are removed.
By using CamoText to redact sensitive data before it enters the AI model along with other privacy tools like VPNs, you can limit the data that reaches the AI model and its website and server hosts.
This allows you to control privacy in a flexible manner and ingrain a habit of reviewing your materials for subjectively sensitive information, so you can use any AI service afterward with your own privacy controls.
Most such services' host companies still log your data ranging from 30 days to two years for "safety" purposes, or require periodic manual deletion, even if they do not "train" their models with your data. Also, the level of privacy (by mode default or user-saved preferences) can change with a server-side update or company policy change, often without users' awareness. Finally, such companies can be compelled by legislation or judicial order to preserve data despite their policies.
Many "private AI" services typically still log and expose your data to third parties where their servers are hosted, and are therefore not truly private.
Yes, CamoText is also designed for general redaction purposes regardless of end use (not just for AI). Sensitive items can be replaced with a data category tag, or completely redacted with a [REDACTED] placeholder using Redaction Mode.
The output can be easily copied as plaintext or saved as a new, metadata-free document.
Once installed, CamoText does not require an internet connection, use cloud servers, or make any API calls. As a licensed desktop app, CamoText Pro does not require a subscription nor any external dependencies, and CamoText Plus operates on your device inside your browser software.
Unlike other popular de-identification and anonymization software, all CamoText products' processing happens locally on your device using advanced NLP (natural language processing) and pattern matching, ensuring maximum privacy as no data is transmitted externally unless the user decides to do so. Document metadata is also wiped by the anonymization process.
Other current offline options require familiarity with the command line, do not have the same breadth of data type recognition nor customizability, and do not have user-friendly interfaces.
CamoText was built by a law firm and is designed for flexible use in compliance with regulations like GDPR, CCPA, HIPAA, and FISMA. By processing data entirely offline and encrypting sensitive information locally before it interacts with external systems like AI, and not retaining nor transmitting user data, it helps users meet stringent privacy requirements, and can be used for different compliance levels and audit controls.
The user retains control over the output, whether de-identified, pseudonymized, or fully anonymized-- including whether they decide to save anonymization key locally or let it be automatically deleted. User behavior and human-in-the-loop review, as well as proper legal counsel for your particular circumstances, determines the level of compliance.
CamoText's software is designed for a human-in-the-loop to use its powerful configuration options, inspect the output text for undetected items, false positives they desire to revert, or additional text they desire to obscure by simply highlighting the text and clicking "Highlight to Anonymize".
Sensitivity and confidentiality can be subjective to the user, and even the best NLP recognizers are not perfect, so a human's review is always necessary. Our software is intended to be efficient, easy-to-use privacy tools for superpowered human productivity.
CamoTextCLI is a powerful CLI version of CamoText, operating completely headless (no GUI), with user-configurable options, and is currently available for Windows and MacOS. It's well-suited for integration into scripting automations and AI Agent workflows. Contact us for more information and customization options.
CamoText was founded to quickly and privately anonymize text and files, originally built in-house for compliant LLM workflows at Varia Law.
Our prioritizes stringent privacy-by-design principles, simple user experience, and no special hardware requirements.
CamoText seeks to empower confidentiality-sensitive professionals and AI users with user-friendly, practical privacy tools.
CamoText's security properties are designed to be directly observable and testable. Don't take our word for it—verify it yourself.
Independently verifiable via standard network monitoring tools.
| Control | Applicability | Implementation |
|---|---|---|
| SC-7 Boundary Protection | Applicable | No network interfaces used; application does not initiate or accept connections |
| SI-7 Software Integrity | Applicable | Code-signed binaries on Windows and macOS; integrity verified at install |
| SA-8(33) Minimization | Applicable | Only data provided by the user for the active task is processed; no additional collection |
| SA-8(6) Minimized Sharing | Applicable | No data is transmitted outside the local process boundary |
| AU-2 Audit Events | Partially Applicable | Optional anonymization key saving; no user content captured in logs |
| SC-28 Protection at Rest | Not Applicable | No persistent data storage; all processing is in-memory and cleared on exit |
This product has not undergone SOC 2 or ISO 27001 certification. Given its fully local, offline architecture with no data transmission or external dependencies, security validation is designed to be directly observable and testable by customers rather than reliant on third-party attestations.
The system design reflects established privacy engineering practices, including principles described in NIST SP 800-53 Rev. 5, SP 800-188, and the OWASP Top 10 Privacy Risks framework. The primary assurance mechanism is the software's observable behavior: no network activity, no external data flow, and no persistent data collection.