PDM
The process

We’re not Uber. We’re an armored car.

Heavy-duty control and protection, every step of the way.

In ten seconds

Upload a CSV, see a flat price, and download your masked file — masking runs inside our sealed cloud perimeter, with no public route in.

Eight stepsUpload → destruction
Upload to destruction
01

Upload

Upload a CSV or Word document. From the first byte, it's inside a controlled environment — nothing about it is exposed in transit.

02

Instant price estimate

We scan a statistically valid sample of your file for structured sensitive data (emails, phone numbers, SSNs) — at zero cost, inside our sealed cloud perimeter, with nothing ever leaving our environment to do it. This locks in one price up front.

03

BAA attestation, if the file looks clinical

If the sample looks like healthcare data, we ask you to confirm the Business Associate Agreement before payment — or to state that the file contains no Protected Health Information. The receipt records the agreement version and the time you attested.

04

Pay

Review the locked price, pay once. No subscriptions, no credits, no hidden fees.

05

Full-file scan

Every column, every row of your actual file is scanned inside that same sealed environment — never a sample, never exposed outside the pipeline. Google Cloud DLP handles structured columns and shape-based identifiers; our own validators add format-specific checks; our self-hosted model handles names and locations written into prose. DLP is a Google Cloud service covered by Google’s data-processing terms. PDM recognizes the kind of data in your file — medical, financial, or general business records — and applies the matching identifier coverage. See what it detects.

06

Masking

Structured fields (like a phone or email column) are masked in full, no exceptions. Sensitive data embedded in free text (like a notes field) is located and masked in place — precise enough that only the sensitive span is touched, everything else arrives exactly as it was.

07

Delivery

You download your masked file through a single-use secure link, alongside its processing receipt. The receipt carries SHA-256 hashes of your original and masked files, so anyone holding them can independently verify the record.

08

Destruction

Our copies — your original and every intermediate copy — are destroyed the moment your masked file is delivered, or automatically within 48 hours if you never download it. Your downloaded file is yours to keep.

Next step

Ready to mask your data?

Upload a file and get an immediate estimate.

Upload My File →