Frequently Asked Questions

No. All processing happens 100% offline on your machine. Your data never leaves your device, ensuring complete privacy and compliance with data protection regulations like GDPR and HIPAA.

Yes, on the Enterprise plan. anonym.plus Desktop includes a built-in Local API and MCP (Model Context Protocol) server so AI agents and MCP hosts can call its anonymization tools directly. By default it listens only on the machine itself (loopback), with bearer-token authentication — nothing is sent to the cloud, and it is off by default until you enable it in Settings, Local API / MCP. Network-reachable deployments are available on request for Enterprise customers. It is not part of the Free, Basic, Pro or Expert plans and is not sold from the website: contact us and we will set it up with you.

Yes, with an Enterprise licence. Once the Local API / MCP server is enabled in Settings, anonym.plus exposes tools like analyze_text, anonymize_text, and deanonymize_text over MCP. Copy the ready-made MCP configuration from Settings into your MCP host (for example Claude Desktop or Cline), and the agent can anonymize PII on-device before it ever reaches an LLM.

anonym.plus supports text files, PDFs, Word documents (DOCX), Excel spreadsheets (XLSX), PowerPoint (PPTX), and images (JPG, PNG) depending on your plan. The Free and Basic plans support text files only, while Pro and Expert plans support all formats.

Yes, you can upgrade to a higher tier at any time. Contact our support team, and we'll apply a pro-rated credit from your original purchase toward the higher-tier license.

We accept all major credit cards via Stripe, and PayPal. All prices are in EUR and payments are processed securely. We also offer invoicing for enterprise customers.

Each plan allows a certain number of simultaneous machine activations (1, 3, or 5 depending on your plan). You can manage your active machines from the account dashboard and deactivate machines to free up slots if you change hardware.

We offer a 30-day money-back guarantee on all paid licenses. If you're not satisfied, contact support for a full refund within 30 days of purchase.

Yes. Every plan is a one-time purchase — you own your license permanently and receive free updates within that major version, with no recurring fee. If you'd like automatic access to future major versions as they ship, you can add optional annual Version Access and Support any time from your account — entirely opt-in, cancel any time, and it never affects the license you already own.

Yes. Because all processing is offline, no data leaves your machine, simplifying GDPR Art. 28 processor agreements. Replace and Redact remove the original values irreversibly and support erasure under Art. 17. Hash and Encrypt are pseudonymisation, not anonymisation: under GDPR Art. 4(5) those values remain personal data. anonym.plus supports your compliance work; the obligations themselves stay with you as controller.

Yes. anonym.plus runs natively on Windows 10/11, macOS 12+, and Linux (Ubuntu, Debian, Fedora). A single license covers all platforms—you can activate the same license on different operating systems, up to the machine limit of your plan.

Yes. Because the app processes data entirely locally, it meets the Safe Harbor and Expert Determination de-identification standards under 45 CFR §164.514. The Pro or Expert plan is recommended for healthcare use cases. Note: anonym.plus is a standalone desktop tool, not a cloud service, so no Business Associate Agreement (BAA) is required.

anonym.plus is built for exactly this case: AML and KYC files, lending and credit applications, audit workpapers, and payment records are anonymized entirely on your own machine. The detection engine is local and covers 340+ PII entity types including CREDIT_CARD, IBAN_CODE, SWIFT_CODE, US_SSN and US_BANK_NUMBER, so no document, page image, or extracted text is uploaded to a cloud service and there is no third-party processor to add to your vendor list. Built-in Financial and GDPR presets cover the usual review workflows, and reversible AES-256-GCM encryption lets you hand a redacted file to an auditor or counterparty and restore the original later from your own encrypted vault.

anonym.plus removes PHI from clinical notes, telehealth transcripts, referral letters, claims, and clinical-trial documents on the device itself. Because the detection engine runs locally and no PHI is disclosed to a cloud vendor, there is no business associate agreement (BAA) to sign. It detects 340+ entity types including MEDICAL_LICENSE, ICD_CODE, US_SSN and UK_NHS, and ships a HIPAA Medical preset next to the GDPR presets. Removing the 18 HIPAA Safe Harbor identifiers (45 CFR 164.514(b)(2)) is directly supported; health data is also special-category data under GDPR Art. 9, and properly anonymized files fall outside GDPR scope under Recital 26. Reversible AES-256-GCM encryption keeps the re-identification path in your own vault for research follow-up.

anonym.plus redacts court filings, exhibits, deposition transcripts, production sets, and contracts locally on your own machine, so privileged and client-confidential material never transits a third-party server. It detects 340+ entity types — names, addresses, dates, US_SSN, taxpayer and financial-account numbers — which covers the personal identifiers FRCP 5.2 requires to be partially redacted in public filings, across PDF, DOCX, XLSX, TXT, CSV, JSON, XML and scanned images. Batch processing with parallel file handling works through whole production volumes, and reversible AES-256-GCM encryption keeps the unredacted mapping in your encrypted vault so a production can be reversed for the record.

anonym.plus anonymizes CVs and job applications, personnel files, payroll and benefits exports, and grievance or investigation reports without sending anything to a cloud service — the detection engine runs locally, so employee data stays inside the employer's own systems. It detects 340+ entity types including names, addresses, US_SSN, IBAN_CODE and national identifiers, and batch processing anonymizes a whole folder of candidate files in one pass, which is what blind CV screening needs. Reversible AES-256-GCM encryption means an incident report shared with outside counsel, or a payroll extract handed to an auditor, can still be restored from your own vault.

Yes, on the Pro plan and above. From the History panel, choose a date range and anonym.plus generates a PDF or CSV record entirely on-device: how many items of which entity types were found in each document, whether each job is reversible, and a verification value from the app's own tamper-evident audit log. The report never contains the detected values themselves — only counts and types — and it is explicitly not a compliance certificate: it documents what the software did, for you to use as supporting evidence for measures such as GDPR Art. 32.