Once a document is sent, you can't take it back.
Vendors, partners, outside counsel or external tools: find and redact PII before anything goes out.
Fully on-premises Installed on your servers. No data leaves your network.
Anonymize your sensitive documents without them leaving your servers
- Files
- PDFWordExcelPowerPointCSVTXT
- Databases
- PostgreSQLMySQL
Contracts, resumes, patient records, database exports: the NymData data anonymization tool finds and redacts PII in your documents and databases before they are shared, reused or exported. Processing runs on your own servers, and an audit report keeps a record of every run.
Before: sensitive data is highlighted in redAfter: detected data is anonymized in the file
Internal Security Audit Report
1. Scope of the engagement
Audit led by John Carter ([email protected]) at the request of Emily Brooks, reachable at (555) 013-2847, on the site located at 1428 Elm Street, Springfield, IL 62704.
2. Access provided
Server 10.12.4.31, account admin / Tx!9pq2L. Expenses reimbursed to the UK subsidiary's IBAN GB82 WEST 1234 5698 7654 32.
Internal Security Audit Report
1. Scope of the engagement
Audit led by () at the request of , reachable at , on the site located at .
2. Access provided
Server , account . Expenses reimbursed to the UK subsidiary's IBAN .
9 sensitive data items detectedDocument protected
- Source file never modified
- Audit report generated
- 0 bytes sent to the cloud
- Runs on your own infrastructure
The problem
Before you share or reuse data, you need to know what is in it
Names, bank account and card numbers, dates of birth and other PII can sit scattered across thousands of documents that are hard to check by hand.
There are three moments to act first: when you share a document, when you reuse data, and when you copy it to another system.
Keep the value. Drop the identity.
Analytics, AI and historical data projects can run on anonymized or pseudonymized data.
Use data that fits its new environment.
Test environments, cloud, database copies or data exchanges: stop using real data when you don't need it.
Supported formats
Every format, handled the way it should be
NymData finds and anonymizes PII directly in your files and databases: a PDF stays a PDF, an Excel sheet stays a sheet, with the same layout.
PDF redaction done right: detected PII is covered by opaque black boxes burned into the page, so the text underneath is gone from the file. The document keeps its look.
Word and PowerPoint
Anonymization directly in the file: paragraphs, tables, headers, footers and speaker notes, with formatting preserved.
Excel and CSV
Sensitive columns detected, cells anonymized, and pseudonyms kept consistent from one row to the next.
Databases
PostgreSQL and MySQL data masking: anonymize or pseudonymize before you copy, test, export or analyze.
How it works
Anonymize your data in 4 steps
- 1Pick a sourceA file, a folder and its subfolders, or a database.
- 2NymData detectsThe local engine combines AI and rules to find PII, each with a confidence score.
- 3Choose the methodReplace the data with its type, with realistic fake names, or with an identifier that stays the same for the same person.
- 4File and report generatedThe source file is never modified: an anonymized copy is created in a separate folder, and an audit report documents the run.
Sensitive data detected
- Identity
- Full names
- Dates of birth
- French social security numbers (NIR)
- Passports
- ID cards
- Government IDs
- Contact details
- Addresses
- ZIP and postal codes
- Emails
- Phone numbers
- Financial
- IBANs
- Credit cards
- French company IDs (SIRET)
- US bank account and routing numbers
- Financial identifiers
- Organizations
- Technical
- IP addresses
- Network identifiers
- Passwords and secrets
- License plates
- Dates
- Sensitive text
Security and audit trail
Your data never leaves your infrastructure
NymData is installed on your servers and runs entirely in your environment. We never see your files.
0
bytes transferred
No document and no data is sent outside your environment during processing.
0
telemetry
No telemetry or usage data is sent to NymData. The logs needed to run the software stay in your environment.
0
cloud services
AI detection runs on your servers. Once activated, NymData works without an internet connection.
Role-based access
Administrator, operator, auditor: the auditor only sees neutral identifiers, never the content of the documents.
Integrity check
A file changed after the scan is rejected before anonymization: what gets processed is exactly what was scanned.
Controlled installation
Delivered to your servers through a secure channel, including on an air-gapped network.
Once activated, NymData can run without an internet connection, including in an air-gapped environment.
An audit report for every run
Timestamped and sealed with a SHA-256 hash, it documents every run for your privacy officer, your auditors or your customers:
- Date and time of the run
- Types of data detected
- Anonymization strategy applied
- Number of items processed
- SHA-256 hash of the report
Sample
Audit report AUD-20260729-0037
- Status
- Completed
- Documents scanned
- 6
- Sensitive data detected
- 20,359
- Data anonymized
- 19,217
- High confidence
- 90%
e964db7dd4de74f80b05930f01370674198033c8eab627f5946adafe5e40c51a
FAQ
Frequently asked questions
Which formats can NymData anonymize?
NymData handles PDF, DOCX, XLSX, PPTX, CSV and TXT files, as well as PostgreSQL and MySQL databases.
Can I anonymize documents without sending them to the cloud?
Yes. NymData is installed on your organization's own infrastructure: your documents and databases are scanned and anonymized locally, and nothing is sent to NymData or to any cloud service.
Are my original files modified?
No. The source file is never modified: NymData creates an anonymized copy in a separate folder, so you can compare both versions before sharing anything.
What is the difference between anonymization and pseudonymization?
Pseudonymization replaces a value with an identifier that, combined with additional information, can lead back to the person: under the GDPR, the data is still personal data. Effective anonymization (anonymisation in the UK) aims to make identification irreversible, given the means reasonably likely to be used; once data is truly anonymous, it is no longer personal data.
Does NymData make us GDPR compliant?
NymData is a tool: it helps you apply GDPR principles such as data minimization, storage limitation and security, by finding and treating PII. It supports the same work under other privacy regulations, such as CCPA. Every run is documented in a timestamped audit report, useful for your records and your audits. Compliance is then assessed across all of your processing activities.
Can it handle large volumes?
Yes. NymData processes entire folders and their subfolders, and can schedule recurring runs that only pick up new files. Capacity depends on your server; a GPU option is available for large volumes.
Can it detect data specific to our business?
Yes. On top of common PII, we can add detection rules for your internal references: case numbers, product codes, business identifiers.
How is NymData installed?
NymData is installed on your own servers and used from a web browser. Once the license is activated, it can run without an internet connection, including in an air-gapped environment.
How much does NymData cost?
NymData is licensed for installation on your own servers, together with an installation service. Pricing depends on your infrastructure and your volumes: we send you a quote after a conversation about your needs.
How does a demo work?
Live, online or on-site, on a full NymData installation: we process a folder of our sample documents (PDF, Word, Excel, PowerPoint) in front of you, from detection to the audit report.
Live demo
Request a demoSee NymData process a full folder, live
Online or on-site, on a full NymData installation.