How it works
The AI understands everything. It just doesn’t know who.
Anonix is a transparent proxy between your applications and the AI providers. It detects personal data, replaces it with placeholders and restores the originals in the response. This is automatic PII redaction for every request to a large language model. For your software and your staff, everything stays the same.
Architecture
A checkpoint at the border of your infrastructure.
Everything that passes this point towards the AI provider has been checked and no longer contains personal data in plain text. Everything that comes back is filled with the original data.
Before and after
The context stays. The identity does not.
The AI knows it is about a court case, who is charged and with what. It just no longer knows exactly who is involved. The result is just as good as with the real data.
Instruction to the AIDraft the operative part of a court order for these facts.
4personal data items replaced
01 · Your original
Defendant Marcus Klein, ref. 7 O 234/26. Charge: fraud under § 263 StGB. Injured party: Müller GmbH, Frankfurt.
02 · Sent to the AI
Defendant [PERSON_1], ref. [CASE_NO_1]. Charge: fraud under § 263 StGB. Injured party: [ORG_1], [CITY_1].
03 · Your result
Court order
In the criminal case against Marcus Klein, ref. 7 O 234/26, for fraud under § 263 StGB to the detriment of Müller GmbH, a date for the main hearing at the Regional Court of Frankfurt is set.
Four detection stages
Several methods that back each other up.
Rule-based pattern recognition and three independent neural methods work one after another. Each stage catches what the previous one missed.
- 01
Pattern recognition
Structured data with a fixed format: email, phone, IBAN, tax ID, amounts, dates, addresses.
- t.richter@kanzlei-richter.de → [EMAIL_1]
- 22.04.2026 → [DATE_1]
- 02
Language understanding
Names, places and organisations in context. In eight languages, even with typos.
- Dr. Thomas Richter → [PERSON_1]
- Ingrid Bergman → [PERSON_2]
- 03
Industry terms
Your own categories, described in your own words and recognised without training: case numbers, diagnoses, cost centres.
- Ref. 7 O 234/26 → [CASE_NO_1]
- 04
Independent review
A dedicated AI re-reads the already pseudonymised text and finds what all other stages missed.
- LG Frankfurt → [ORG_1]
What makes Anonix different
- 01
Consistent placeholders
The same name gets the same placeholder throughout the text. The AI still understands relationships and references correctly.
- 02
Typo tolerance
Misspelled names are recognised too. “Musterman” is replaced just like “Mustermann”.
- 03
Your own categories in your own words
Describe industry-specific data types such as cost centres or project numbers in plain words. Anonix recognises them immediately, without training.
- 04
Real time, even when streaming
Streamed responses are restored continuously. Your staff see the answer as quickly as usual.
- 05
No stored mapping
The mapping between placeholder and original only exists in memory during processing and is discarded afterwards.
- 06
Eight languages
German, English, French, Spanish, Italian, Dutch, Portuguese and Polish.
Administration and control
Everything in view, in one place.
- Admin interface
- Manage AI providers, configure rules, monitor costs.
- Audit log
- Complete logging of all requests, CSV export.
- Multi-tenancy
- Separate databases per department or customer.
- Roles and permissions
- Role-based access and optional two-factor sign-in.
- Cost control
- Usage per provider and tenant visible at any time.
- Protected access
- API keys encrypted with AES-256-GCM, passwords with Argon2id, rate limiting and CSRF protection.
Positioning
Why detection alone is not enough.
There are products that can detect personal data. But none of them solves the actual problem: using AI services safely without personal data leaving your organisation.
Transparent AI proxy
- Anonix
- Yes
- OpenRouter®
- Yes, as an AI gateway
- Microsoft® Presidio®
- No
- Google® Cloud DLP
- No
- AWS® Comprehend
- No
Supported AI providers
- Anonix
- OpenAI® and all compatible APIs, Claude®, Gemini®
- OpenRouter®
- Over 400 models
- Microsoft® Presidio®
- No proxy
- Google® Cloud DLP
- No proxy
- AWS® Comprehend
- No proxy
Data stays in the EU
- Anonix
- Yes, operated in the EU
- OpenRouter®
- EU routing on Business or Enterprise plans only
- Microsoft® Presidio®
- Yes
- Google® Cloud DLP
- Google® Cloud
- AWS® Comprehend
- AWS® Cloud
Automatic restoration of the original data
- Anonix
- Yes
- OpenRouter®
- No, permanent redaction only
- Microsoft® Presidio®
- No
- Google® Cloud DLP
- No
- AWS® Comprehend
- No
Industry-specific detection
- Anonix
- Custom categories without training
- OpenRouter®
- 8 standard types and custom regex patterns
- Microsoft® Presidio®
- Standard types only
- Google® Cloud DLP
- Over 150 predefined types
- AWS® Comprehend
- Standard types only
More than five languages
- Anonix
- 8 languages
- OpenRouter®
- Not documented
- Microsoft® Presidio®
- Partly
- Google® Cloud DLP
- Yes
- AWS® Comprehend
- 2 languages
AI-based quality review
- Anonix
- Yes
- OpenRouter®
- No
- Microsoft® Presidio®
- No
- Google® Cloud DLP
- No
- AWS® Comprehend
- No
Real time with streaming
- Anonix
- Yes
- OpenRouter®
- No restoration
- Microsoft® Presidio®
- No
- Google® Cloud DLP
- No
- AWS® Comprehend
- No
Typo tolerance
- Anonix
- Yes
- OpenRouter®
- No
- Microsoft® Presidio®
- No
- Google® Cloud DLP
- No
- AWS® Comprehend
- No
Usable in line with EU law
- Anonix
- Operated in the EU
- OpenRouter®
- Subject to the US CLOUD Act
- Microsoft® Presidio®
- Open source, self-operated
- Google® Cloud DLP
- Subject to the US CLOUD Act
- AWS® Comprehend
- Subject to the US CLOUD Act
Comparison at feature level. Product names mentioned are trademarks of their respective owners.
Where is the difference?
OpenRouter® is an AI gateway with access to over 400 models and has recently added redaction of sensitive data. But the check only happens on the servers of the US company, so the data leaves your organisation in plain text. The redaction is permanent: every name becomes [PERSON_NAME], the AI can no longer tell people apart, and the response contains no original data. OpenRouter® detects names and addresses only as a beta feature. If this check times out, the request is forwarded unredacted.
Google® Cloud DLP and AWS® Comprehend do detect personal data, but they are themselves cloud services of US companies. Routing through an EU data centre does not change this: the CLOUD Act applies regardless of server location, because the parent company is based in the US.
Microsoft® Presidio® is open source and can be run locally. But it has no proxy function, no restoration of the original data and no detection of custom categories without training. It is a toolkit, not a finished product.
Let’s talk abouthow you useAI.
In a short conversation we show you how Anonix fits your organisation: which providers, which data, which rules. No obligation.