Let AI reason over the whole document, without ever learning who's in it.
Anonymize swaps every name, SSN, account number and email for a consistent placeholder like [PERSON_1], so the model still follows who did what. Then it maps the answer back to the real names, on your device. The file is never uploaded. Not to an AI, not even to us.
No upload · No account required · Works in Chrome, Edge, Firefox & Safari
Just need it gone for good, with a certificate to prove it? Use Redact for AI: permanent redaction instead of reversible placeholders.
Sometimes deleting the names breaks the question.
Black out both parties in a contract dispute and the AI can't tell you who breached first. Strip every name from a medical history and it loses the thread of who the patient even is. When you want the model to actually reason, a page of black boxes leaves it nothing to work with.
Redaction can be too final
Permanent redaction is the right call for sharing a file. But it deletes the very structure an AI needs to read the document back to you.
Pasting it raw is a disclosure
Drop the unredacted document into a consumer AI tool and the real names, account numbers and health details land on a third party's servers. The duty of confidentiality doesn't pause for a prompt.
You can't un-send a prompt
There's no recall button once it's in the box. The only safe prompt is one where the identities were already swapped before you hit enter.
Keep the meaning. Swap the identities. In three steps.
Anonymize opens in the same review editor as Redact and runs the same on-device detection, then replaces each finding with a placeholder instead of a black bar.
-
Drop your PDF in
It opens in the redaction editor instantly. Nothing is uploaded. The file is read straight into memory in this tab.
-
Auto-detect and alias
One click finds names, SSNs, account numbers, emails, dates and more, and swaps each for a typed placeholder. The same person becomes the same token everywhere, so the AI tracks one individual, not five strangers.
-
Copy the safe text, then map the answer back
Paste the aliased version into any AI. When it replies, paste the reply back here and KeptPDF restores the real names, all on your device.
Anonymize swaps the text for a consistent alias the model can still follow, then maps the answer back. Redaction deletes the text for good and proves it's gone.
Want to ask an AI about it and keep the structure intact? Anonymize. Sharing a clean file, or need a certificate? Redact. Both run entirely in your browser.
Built so the AI understands the document, not the people.
Turn the whole file into something safe to paste, while keeping every relationship the model needs to be useful.
Consistent tokens
Mention a person five times and they stay [PERSON_1] every time, so the model follows one individual instead of five strangers.
Typed placeholders
[PERSON], [ORG], [EMAIL], [SSN]. The label tells the AI what kind of thing it's reasoning about, without revealing the value.
Reversible this session
Keep the mapping while you work, paste the AI's reply back, and the real names return. The map lives in this tab only. It is never saved or uploaded.
Works on the real page
Same editor as Redact: review each placeholder on the actual document, keep one as its original, or mark something the detector missed.
Form fields too
Names and numbers typed into PDF form fields are aliased alongside the body text, not left sitting in the file for the model to read.
Runs in your browser
Detection and aliasing happen on your device. The document, and the mapping back to real identities, never leave it.
The tool that can't leak your file, because it never has it.
Most online PDF tools upload your document to a server to do the work, which is the exact move you're trying to avoid before AI. KeptPDF detects and aliases on your device, so there's nothing to upload, retain or breach. The reverse mapping that turns [PERSON_1] back into a real name lives only in this browser tab.
Placeholders remove the direct identifiers: the names, the numbers, the emails. They don't scrub every contextual clue, so treat the output as pseudonymized, and give it a human review before you paste.
It also stays reversible in this session. If a file has to leave your hands for good, redact it instead. Detection is a strong first pass, not a guarantee.