Upload
Upload a CSV or Word document. From the first byte, it's inside a controlled environment — nothing about it is exposed in transit.
Instant price estimate
We scan a statistically valid sample of your file for structured sensitive data (emails, phone numbers, SSNs) — at zero cost, inside our sealed cloud perimeter, with nothing ever leaving our environment to do it. This locks in one price up front.
BAA attestation, if the file looks clinical
If the sample looks like healthcare data, we ask you to confirm the Business Associate Agreement before payment — or to state that the file contains no Protected Health Information. The receipt records the agreement version and the time you attested.
Full-file scan
Every column, every row of your actual file is scanned inside that same sealed environment — never a sample, never exposed outside the pipeline. Google Cloud DLP handles structured columns and shape-based identifiers; our own validators add format-specific checks; our self-hosted model handles names and locations written into prose. DLP is a Google Cloud service covered by Google’s data-processing terms. PDM recognizes the kind of data in your file — medical, financial, or general business records — and applies the matching identifier coverage. See what it detects.
Masking
Structured fields (like a phone or email column) are masked in full, no exceptions. Sensitive data embedded in free text (like a notes field) is located and masked in place — precise enough that only the sensitive span is touched, everything else arrives exactly as it was.
Delivery
You download your masked file through a single-use secure link, alongside its processing receipt. The receipt carries SHA-256 hashes of your original and masked files, so anyone holding them can independently verify the record.
Destruction
Our copies — your original and every intermediate copy — are destroyed the moment your masked file is delivered, or automatically within 48 hours if you never download it. Your downloaded file is yours to keep.