By George Curta · Last updated 2026-04-07
Features & Capabilities
A complete reference of every feature in the anonym.legal LibreOffice Extension for Writer, Calc, and Impress.
5 Anonymization Methods
Choose the right method for your use case. Each method can be applied globally or per entity type using per-entity operators.
Replaces PII with typed units like <PERSON_1>, <EMAIL_ADDRESS_1>. Consistent within a document — the same name always gets the same token.
Reversible with the replacement mapping.
Replaces characters with asterisks while preserving the format. Useful when you need to show partial data like the last 4 digits of an SSN.
Configurable masking character and visible characters.
Completely removes the PII and replaces it with [REDACTED]. Irreversible — the original data cannot be recovered.
Best for maximum privacy and regulatory alignment.
Produces a cryptographic hash of the PII. The same input always produces the same hash, enabling cross-document correlation without exposing the data.
One-way function. Cannot be reversed.
Encrypts PII with AES-256-GCM authenticated encryption. The ciphertext replaces the original text in the document. With the correct encryption key, you can decrypt and restore the original data.
Best for workflows where authorized users need to deanonymize later. Keys are managed via the Encryption Keys feature.
Presets
Presets save your anonymization configuration so you can reuse it across documents and devices.
Save Configurations
Save entity selections, method, language, and per-entity operator settings as a named preset.
Cross-Device Sync
Presets sync automatically to your anonym.legal account. Access them on any device where you sign in.
Per-Entity Operators
Configure different operators for each entity type within a preset (e.g., Replace names, Mask SSNs, Hash emails).
Preset Management
Create, rename, and delete presets from the sidebar. The Presets panel shows preset name and entity configuration.
Encryption Keys
Manage encryption keys for the Encrypt anonymization method. Keys are stored securely on the server, wrapped with your account key encryption key (KEK) for zero-knowledge safeguards.
ZK-Wrapped Storage
Keys are encrypted with XChaCha20-Poly1305 using your account KEK before storage. The server never sees your raw encryption keys.
Auto-Load
When you select a saved key from the dropdown, the key value is automatically fetched and decrypted. No manual entry needed.
Session Persistence
Keys persist for the duration of your session. No need to re-select after each anonymization. Cleared on sign-out.
Preview Dialog
The preview dialog opens after analysis and lets you review and customize the anonymization before applying it to your document.
Entity Table
Displays up to 50 detected entities with their type, original text, and proposed anonymization result.
Select / Deselect
Use Select All or Deselect All buttons, or toggle individual entities. Only selected entities will be anonymized.
Per-Entity Review
Review each detected entity individually. Accept or reject specific detections to handle false positives.
Format Preservation (Writer Only)
When anonymizing in Writer, the extension preserves the original text formatting. The replacement text inherits the same visual style as the original.
Font Properties Preserved
Font Name, Font Size, Bold, Italic, Font Color, Underline, Strikethrough
Paragraph Properties Preserved
Alignment, First-Line Indent, Left Margin, Right Margin
Note: Format preservation is only available in Writer. Calc and Impress process plain text content without formatting.
Document Support
The extension works across three LibreOffice applications, each with application-specific document handling.
Writer
Full text extraction with selection support. Format preservation for bold, italic, underline, font name, font size, color, and highlight. Processes paragraphs individually.
Calc
Processes cell contents as tab-separated text. Analyzes and anonymizes text within individual cells across sheets.
Impress
Extracts text from slide text objects (shapes). Processes text content from all slides in the presentation.
Multi-Language Detection
The extension detects PII in 48 languages. Set the detection language in the sidebar or switch it from the preview dialog. The language determines which NER models and regex patterns are applied.
Quick Actions
The extension registers toolbar commands for quick access to common operations.
Open Sidebar
Opens the anonym.legal sidebar panel. Available from the toolbar or View → Sidebar menu.
Anonymize Selection
Analyzes and anonymizes the currently selected text. Skips the sidebar and goes directly to the preview dialog.
Analyze Selection
Analyzes the current selection for PII without anonymizing. Opens the preview dialog in review-only mode.
Chunked Processing
Large documents are processed in manageable chunks to ensure reliable results and avoid timeouts.
Chunk Size
8,000 characters per chunk with 400-character overlap to prevent entity splitting at boundaries.
Size Limit
Maximum document size of 10 MB. Documents exceeding this limit should be split or processed by section.
Request Timeout
120-second timeout per API request. Large chunks may require multiple requests.
Cross-Device Sync
Your configuration syncs automatically across all devices where you sign in with your anonym.legal account.
Presets
Entity selections, methods, operators
Custom Entities
Custom regex patterns and deny lists
Encryption Keys
ZK-wrapped key metadata and values
Sync runs automatically every 5 minutes. Changes are cached locally and synced when connectivity is restored.
About this page
We update this page when our platform or the law changes.
Read our founder note for how we work.
Each change shows up in the timestamp at the top.
Related reading
- Common questions
- Glossary
- How tokens work
- Security posture
- Where we comply
- What we detect
- Case studies
- Release notes
We follow these rules
- GDPR (EU 2016/679).
- ISO/IEC 27001:2022.
- NIS2 (EU 2022/2555).
- HIPAA safe harbor under 45 CFR § 164.514(b)(2).
Our promise
We do not sell your data.
We do not train models on your text.
We store your files in Germany.
You can delete your account at any time.
You own your work.
Where we run
Our servers live in Falkenstein, Germany.
We use Hetzner. They hold ISO 27001 certification.
All data stays in the EU.
Backups run every day.
Need help?
Email support@anonym.legal.
We reply within one business day.
How we test
We run a full check suite on every release.
Each surface gets its own sweep script and report.
Human reviewers spot-check the output each week.
We track recall and precision on a labelled set.
Bad runs block the deploy.
What we never do
- We never sell your information to third parties.
- We never train models on what you upload.
- We never keep your work after you delete it.
- We never share keys with any outside firm.
- We never run ads inside the product.
Plans in plain words
We sell credits, not seats.
One credit covers one short job.
Long jobs use a few credits each.
You can top up at any time.
Unused credits roll over each month.
Read the plans page for current rates.
Who built this
A small team of engineers and lawyers built this.
We ship from Europe and work in the open.
Our founder note spells out why we started.
Where to start
- Open the web app and try a sample file.
- Learn how credits get counted.
- See current plans and limits.
- Meet the team behind the product.
How the parts fit
A browser add-on cleans text inside Chrome.
A Word plug-in handles drafts in Office.
A small desktop tool works on whole folders.
An agent protocol link feeds large models safely.
All four share one core engine and one rule set.
Words from our team
We started this work after a lunch about cookies.
One friend kept getting odd ads on her phone.
We asked why a court file leaked through a draft.
We sketched the first build on a napkin that week.
By month three we had a tiny demo for a friend.
She used it on her first case the next day.
Common questions we hear
Can the tool read scanned PDFs? Yes, with OCR.
Does it work on long files? Yes, in small chunks.
Can I roll my own rule set? Yes, save it as a preset.
Does it run offline? The desktop build runs offline.
Do you keep my files? No, the cloud build wipes after each run.
Will it learn from my work? No, we never train on inputs.
A short tour of the workflow
Upload a file or paste a snippet of prose.
Pick the entities you want gone from the draft.
Choose a method: replace, mask, hash, encrypt, or redact.
Press run and watch the side panel show each hit.
Skim the result and tweak any rule that misfired.
Save the cleaned file or send it to a teammate.