By George Curta · Last updated 2026-04-07
Features & Capabilities
A complete reference of every feature in the anonym.legal Office Add-in for Microsoft Word.
5 Anonymization Methods
Choose the right method for your use case. Each method can be applied globally or per entity type using per-entity operators.
Replaces PII with typed units like <PERSON_1>, <EMAIL_ADDRESS_1>. Consistent within a document -- the same name always gets the same token.
Reversible with the replacement mapping.
Replaces characters with asterisks while preserving the format. Useful when you need to show partial data like the last 4 digits of an SSN.
Configurable masking character and visible chars.
Completely removes the PII and replaces it with [REDACTED]. Irreversible -- the original data cannot be recovered.
Best for maximum privacy and regulatory regulatory fit.
Produces a cryptographic hash of the PII. The same input always produces the same hash, enabling cross-document correlation without exposing the data.
One-way function. Cannot be reversed.
Encrypts PII with AES-256-GCM authenticated encryption. The ciphertext replaces the original text in the document. With the correct encryption key, you can decrypt and restore the original data.
Best for workflows where authorized users need to deanonymize later. Keys are managed via the Encryption Keys feature.
Presets
Presets save your anonymization configuration so you can reuse it across documents and devices.
Save Configurations
Save entity selections, method, language, and per-entity operator settings as a named preset.
Cross-Device Sync
Presets sync automatically to your anonym.legal account. Access them on any device where you sign in.
Per-Entity Operators
Configure different operators for each entity type within a preset (e.g., Replace names, Mask SSNs, Hash emails).
Search & Filter
Search presets by name, description, entities, or tags. Filter to find the right preset quickly.
Per-Entity Operators
Instead of applying one method to all entities, you can assign different operators to each entity type for fine-grained control.
Example Configuration
This configuration can be saved as a preset and reused across documents. Each entity type gets the treatment most appropriate for its sensitivity level.
Encryption Keys
Manage encryption keys for the Encrypt anonymization method. Keys are stored securely on the server, wrapped with your account's key encryption key (KEK) for zero-knowledge protection.
ZK-Wrapped Storage
Keys are encrypted with your account KEK before storage. The server never sees your raw encryption keys.
Auto-Load
When you select a saved key from the dropdown, the key value is automatically fetched and decrypted. No manual entry needed.
Session Persistence
Keys persist for the duration of your session. No need to re-select after each anonymization. Cleared on sign-out.
Preview Window
The Preview Window opens after analysis and lets you review and customize the anonymization before applying it to your document.
Method Selector
Switch between Replace, Mask, Redact, Hash, and Encrypt directly from the preview. Color-coded method badges show the active method at a glance.
Language Selector
Change the detection language without going back to settings. Click "Apply Changes" to re-analyze with the new language.
Preset Selector
Switch between saved presets in the preview. The collapsible panel shows preset name, entity count, and description.
Apply Changes
When you change the method, language, or preset, an "Apply Changes" button appears. Click it to re-analyze with your new settings before applying to the document.
Preserve Formatting
When enabled, the add-in maintains the original formatting (bold, italic, underline) of the text being anonymized. The replacement credits inherit the same formatting as the original text.
Note: Note: Preserve Formatting works best with simple inline formatting. Complex layouts with tables, nested styles, or track changes may require manual review after anonymization.
Multi-Language Detection
The add-in detects PII in 48 languages. Set the detection language in settings or switch it from the Preview Window. The language determines which NER models and regex patterns are applied.
Cross-Device Sync
Your configuration syncs automatically across all devices where you sign in with your anonym.legal account.
Presets
Entity selections, methods, operators
Custom Entities
Custom regex patterns and deny lists
Encryption Keys
ZK-wrapped key metadata and values
Sync happens automatically in the background. If you make changes while offline, they are cached locally and synced when connectivity is restored.
About this page
We update this page when our platform or the law changes.
Read our founder note for how we work.
Each change shows up in the timestamp at the top.
Related reading
- Common questions
- Glossary
- How tokens work
- Security posture
- Where we comply
- What we detect
- Case studies
- Release notes
We follow these rules
- GDPR (EU 2016/679).
- ISO/IEC 27001:2022.
- NIS2 (EU 2022/2555).
- HIPAA safe harbor under 45 CFR § 164.514(b)(2).
Our promise
We do not sell your data.
We do not train models on your text.
We store your files in Germany.
You can delete your account at any time.
You own your work.
Where we run
Our servers live in Falkenstein, Germany.
We use Hetzner. They hold ISO 27001 certification.
All data stays in the EU.
Backups run every day.
Need help?
Email support@anonym.legal.
We reply within one business day.
How we test
We run a full check suite on every release.
Each surface gets its own sweep script and report.
Human reviewers spot-check the output each week.
We track recall and precision on a labelled set.
Bad runs block the deploy.
What we never do
- We never sell your information to third parties.
- We never train models on what you upload.
- We never keep your work after you delete it.
- We never share keys with any outside firm.
- We never run ads inside the product.
Plans in plain words
We sell credits, not seats.
One credit covers one short job.
Long jobs use a few credits each.
You can top up at any time.
Unused credits roll over each month.
Read the plans page for current rates.
Who built this
A small team of engineers and lawyers built this.
We ship from Europe and work in the open.
Our founder note spells out why we started.
Where to start
- Open the web app and try a sample file.
- Learn how credits get counted.
- See current plans and limits.
- Meet the team behind the product.
How the parts fit
A browser add-on cleans text inside Chrome.
A Word plug-in handles drafts in Office.
A small desktop tool works on whole folders.
An agent protocol link feeds large models safely.
All four share one core engine and one rule set.
Words from our team
We started this work after a lunch about cookies.
One friend kept getting odd ads on her phone.
We asked why a court file leaked through a draft.
We sketched the first build on a napkin that week.
By month three we had a tiny demo for a friend.
She used it on her first case the next day.
Common questions we hear
Can the tool read scanned PDFs? Yes, with OCR.
Does it work on long files? Yes, in small chunks.
Can I roll my own rule set? Yes, save it as a preset.
Does it run offline? The desktop build runs offline.
Do you keep my files? No, the cloud build wipes after each run.
Will it learn from my work? No, we never train on inputs.
A short tour of the workflow
Upload a file or paste a snippet of prose.
Pick the entities you want gone from the draft.
Choose a method: replace, mask, hash, encrypt, or redact.
Press run and watch the side panel show each hit.
Skim the result and tweak any rule that misfired.
Save the cleaned file or send it to a teammate.