obscurIA on one page, for whoever has to sign off

Documents stay on the device.

Detection, replacement and restoration happen locally. Files are never uploaded anywhere. Only the AI chat — optional, and active only with a key the customer connects — sends the chosen provider text that is already protected (placeholders instead of personal data), and only after the final check.

✓ With no keys connected, unplug the network and keep working; with the chat, traffic to the provider is visible and the only traffic to that provider.

Four things leave the computer, and a fifth only if you turn it on.

The licence check, the update check, the workstation activation — once only, when you enter your code — and, on the free plan, a count: how many documents you protected this week. Not which ones, not what type, not how much data they held. None of the four carries document text or the file name. The fifth is optional: protected text to the chosen AI provider, only with the chat and only with a key the customer connects.

✓ Watch network traffic during a run.

What the AI provider sees, with the chat on.

Text with placeholders instead of personal data. Not the files, not the map between placeholders and real values, not the real values. Text with placeholders is pseudonymised, not anonymous: under the GDPR (Art. 4(5)) it stays personal data if whoever receives it can trace it back to a person from context. The relationship with the provider — contract, retention, any data processing agreement — is the customer's, using their own key.

✓ Connect a key and watch what goes out, against the original text.

Activation sends twelve digits, the operating system and the version.

The twelve digits are derived from a key that stays on your computer: they tell two installations apart and cannot identify a machine in the world. We do not send the computer's name, which often contains a person's name.

✓ Watch the traffic when you enter your licence code.

Scans are read locally.

Optical recognition runs on the device, with models downloaded once. No image leaves.

✓ Unplug the network and open a scanned PDF.

The map between placeholders and real values is encrypted (AES-256-GCM).

The key lives in the system keychain. We hold no copy: if it is lost, those documents cannot be recovered, not even by us.

✓ Look for the entry in your operating system's keychain.

When there is no keychain, the software says so.

With no user session the key goes to a file with restricted permissions: weaker protection, which the interface declares rather than hides.

✓ Start it without a graphical session and read the warning.

Licences verify without connecting.

Ed25519 certificate, public key inside the software. No server has to answer for you to be able to work.

✓ Activate the licence, then work offline.

Licences, email addresses, billing details.

For these we act as an independent controller, like any supplier issuing invoices.

✓ Ask for an export of your data: that is all there is.

We do not see documents, their content, or file names.

Not an organisational promise: no technical path brings them to us. On documents we are not a processor, because we do not perform the processing.

✓ Repeat the traffic check with a recognisably named document.

Every processed document can produce a signed attestation.

Which file (by digest), when, on which installation, how many occurrences per category, whether it came from a scan, whether a person reviewed it. No values inside: only counts.

✓ Produce one and search it for a personal data value.

What the attestation is NOT, written inside the attestation.

Not a qualified eIDAS signature, and not the Article 30 record. It is proof of integrity of what was done.

✓ Read the document: it says so plainly.

Detection does not find everything, and no tool can.

With certainty what carries a check digit — tax identifiers, VAT numbers, IBANs, cards — because it verifies them. The rest with good reliability.

✓ Try it on one of your own documents and see what it flags.

On a scan, copying stays blocked until a person confirms.

OCR can miss a value with nobody noticing. The attestation says «reviewed by a person» only if someone pressed that button.

✓ Open a scan and try to copy before confirming.

Before letting text out, the software re-reads it.

It looks for what is left, including values disguised with invisible characters or look-alike letters. If the check fails, the text does not leave.

✓ Paste an invisible character into the document and try to export.