AI document privacy guide

Restore names in the result of your AI work.

A summary or a new document works too. Keep the codes and use the vault from the same dossier.

1
PseudonymizeReplace names with stable codes and save the updated encrypted vault.
2
Work with your AIShare the protected copy. Ask the AI to keep every code unchanged.
3
Restore names locallyUpload the result or paste the answer, open your vault and check the preview.

The same company has different names across files. Can it keep one code?

Yes. Open the main mapping in the vault and choose Add another name. For example, Dupont SAS and Société Dupont can both use ORG-0042. The association is always explicit: COSMO Privacy never merges two companies automatically. Check that they are the same entity, then save the updated encrypted vault. Both names will keep that code across the current batch and in files processed later with the same vault. Removing an additional name leaves the main name and code unchanged.

Can I restore a batch?

Yes. Choose individual files or select the whole batch. Unknown or ambiguous codes block the entire batch. Preparation opens a separate final review screen. Going back to edit files invalidates prepared outputs. Review the summary, optional grouped details and dossier context, then confirm once to download a single copy or a ZIP archive. Automatic checks cannot be skipped.

How are names written back into PDFs?

The code regions are erased from the rendered pixels and names are written in black on white in a newly flattened PDF, without a hidden source text layer. Use the page preview to check legibility. Original fonts and exact layout are not recreated; deleted content without mappings cannot be recovered.

How do I review and correct a copy?

Choose your files, check all protections (vault identity mappings, automatic health/contact/identifier detection and cleanup), confirm mappings for the batch, then review PDFs in their dedicated step. Prepare and check all copies before downloading. Deselecting a mapping for processing does not delete it from your vault. Health protection is enabled in recommended settings, but only explicit patterns are detected. Draw manual PDF masks for missed regions. Keeping an automatic term leaves all its occurrences readable in that PDF and requires review. Changes require a new preview.

Masking, anonymisation or pseudonymisation?

Masking removes selected information; a solid COSMO PDF mask cannot be restored. Pseudonymisation replaces identities with codes and retains a protected mapping for restoration. Anonymisation aims to prevent identification by reasonably likely means, including contextual links. Removing names alone does not guarantee it.

Can I restore a new document created by AI?

Yes. Upload the AI-generated document or paste its response, then open the vault for the original dossier. The content can change, but identity codes such as PERS-0001 must remain intact. Review the dossier and the grouped names before confirming the download.

Which formats can I restore?

Supported content includes TXT, Markdown, CSV, Word, Excel and PowerPoint. Unchanged COSMO PDF copies can use positions stored in the updated vault. Modified or other PDFs depend on locally readable codes; flattened output does not recreate the original layout.

What if AI removes or invents codes?

Missing identities are not guessed. Unknown or ambiguous codes block restoration. Ask the AI to preserve codes exactly. Deleted content and solid masks without mappings cannot be recovered.

Does my identity vault go to the AI?

No. Keep the encrypted vault and password on your device. Only share the pseudonymized copy with the AI service you choose. Local processing does not make every document anonymous: context and missed information can still identify people.

Are there monthly file quotas?

The subscription has no monthly file credits. Technical limits apply per treatment: 25 MiB per file, 100 PDF pages, 100 Excel sheets and 200,000 populated cells, batches of 10 files and 50 MiB. Plain text files are limited to 5 MiB and pasted text to 200,000 characters. Office content is limited to 100 MiB decompressed and 8 MiB per XML part. Performance depends on your device.

How can I try it safely?

The public demo accepts only official fictional examples and a fixed fictional text. The file demo starts with an empty temporary vault: select and add the suggested fictional identities, then review PDFs and prepare the copies. The express text example has two ready mappings. Restarting clears the fictional session, never your personal vault. Preview and confirmation are required before downloading restored content.

Correct PDF regions before downloading

On desktop, PDF zones and the page are shown side by side. Hover or focus a zone to locate it; checked zones are protected. Leave visible keeps that data readable and requires confirmation. Drawing mode adds pink regions by dragging; undo/clear affect only pink regions. In the document tool, each pink mask can be moved, resized or deleted. A yellow region can be kept individually; other occurrences remain protected. Keeping a whole term throughout the PDF is a separate advanced option. Retained regions require confirmation, and changes require a new final check.

Try the fictional demo