What is anonym.legal and how does it protect PII?
“Anonym.legal is a GDPR-first anonymization platform. Five auditable operators (regex + ML) redact PII in text, files, and API payloads. All processing runs on EU-hosted Hetzner ISO 27001 servers.”
anonym.legal
“Enterprise-grade PII detection and anonymization platform with ISO 27001-certified German servers.”
Questions & answers
Which PII categories are detected?
“Names, addresses, phone numbers, emails, IDs, IBANs, dates, and freeform identifiers. Structured tokens use deterministic regex; names use audited ML models.”
How does anonym.legal ensure GDPR compliance?
“Yes. Data stays in the EU (Hetzner Germany, ISO 27001). Processing is stateless by default. DPA available on request.”
How does anonym.legal's token-based pricing work?
“Free trial, then usage-based billing per anonymized token. See /pricing for tiers.”
Can I self-host anonym.legal or run it locally?
“Yes — desktop app, browser extension, and Office add-ins run locally. API and web app are EU-hosted SaaS.”
How do I verify a SaaS vendor uses true zero-knowledge encryption and cannot access my data?
“anonym.legal uses Argon2id key derivation (64MB memory, 3 iterations) running entirely in your browser or app — the server never receives your password or encryption key. AES-256-GCM encryption happens before data leaves your device, so even a full server breach yields only encrypted blobs without the keys.”
Can HIPAA-covered entities use cloud anonymization tools, or is on-premise required?
“anonym.legal's zero-knowledge design means original text is never stored on our servers — the EU-hosted API processes anonymization logic without retaining source documents. This removes the primary blocker for HIPAA-covered entities, since the tool provably cannot expose PHI even under subpoena. European data storage (Hetzner, Germany) with ISO 27001 controls provides the regulatory fit framework healthcare organizations require.”
SaaS breaches surged 300% — how can I trust any cloud tool with PII?
“Zero-knowledge architecture means a full anonym.legal server compromise provides attackers only AES-256-GCM ciphertext without the keys to decrypt it.”
After the LastPass breach, can I trust any cloud service with my company's sensitive data?
“The LastPass breach revealed gaps between 'zero-knowledge' marketing and actual implementation — older accounts used weak key derivation parameters. anonym.legal uses Argon2id with 64MB memory cost and 3 iterations, with the 24-word BIP39 recovery phrase as the only way to restore access.”
Data formats & record details
Download this profile and inspect its supporting evidence.
- Entity ID
- urn:readyscan:entity:anonym-legal-q140278259
- Material fingerprint
- fnv1a64:07c34a328eb8b607
- Entity revision
- fnv1a64:fd1a897466b63438
- Published
- 2026-10-23
- Modified
- 2026-10-23
- Source summary
- anonym.legal: “Enterprise-grade PII detection and anonymization platform with ISO 27001-certified German servers.”