anonym.plus is a desktop application that finds and removes personal data from documents, text and images entirely on your own machine. No account is needed to try it, no file is uploaded, and no network connection is required for detection or anonymization. It exists so that you can put a contract, a support ticket, a medical form or a spreadsheet into ChatGPT, Claude, Gemini or your own model without handing over the personal data inside it.
This repository is the download channel. It carries the signed installers and the update manifests the app checks. The application source is not public. Start at anonym.plus — or jump straight to Downloads below.
Website · Pricing · Documentation · FAQ · Entity types · Demos · Contact · Changelog
Latest release: v8.8.3. The links below always resolve to the newest build for that platform.
| Platform | Download | File | Size |
|---|---|---|---|
| Windows 10 or later (x64) | Download | anonym.plus_8.8.3_x64-setup.exe |
142 MB |
| macOS 10.15+ — Apple Silicon | Download | anonym.plus_8.8.3_aarch64.dmg |
183 MB |
| macOS 10.15+ — Intel | Download | anonym.plus_8.8.3_x64.dmg |
233 MB |
| Linux — Debian / Ubuntu (amd64) | Download | anonym.plus_8.8.3_amd64.deb |
249 MB |
You can also take the files directly from the release page. The packages are large because the entire detection engine — Presidio, spaCy and an English language model — ships inside them. Nothing is downloaded at first run.
sha256 b054d553f5db092014c1908bbf496ac6409440fc491d3957f9cd4a4d92709b41 anonym.plus_8.8.3_x64-setup.exe
sha256 74f0a2d95dc59e2358706ad0b8dae4df0f8f71c0f9b914c7c94f38ec9bf19ecc anonym.plus_8.8.3_aarch64.dmg
sha256 f0925b16694e498a60ddb40bf7ddb7444f3327b45b357a3b81303c97b12ad57d anonym.plus_8.8.3_x64.dmg
sha256 23936b2b9d74f2cef52e41e4ba15ae46f6d09e05a78fff9e607071000202bc56 anonym.plus_8.8.3_amd64.deb
Signing status, stated plainly. The Windows installer, the application binary and the bundled detection engine carry a valid Authenticode signature (Voltage Brothers Infrastruktur UG (haftungsbeschränkt)). The macOS builds are not notarized yet, so after a browser download Gatekeeper will refuse the first launch — open System Settings → Privacy & Security → Open Anyway. The Debian package carries no signature. Checksums above are the way to verify all four.
- Reads the file. PDF, DOCX, XLSX, TXT, CSV, JSON and XML, plus images — PNG, JPG, BMP and TIFF — with OCR text extraction in 38 languages.
- Finds the personal data. A full Presidio + spaCy NLP engine ships with the app and runs as a local process. English is pre-installed; 20+ further language models download on demand.
- Anonymizes it, the way you choose. Six modes: replace with a placeholder, redact it away, mask it partially, hash it with SHA-256, encrypt it reversibly with AES-256-GCM, or substitute synthetic but realistic fake data.
- Puts it back, if you want it back. Encryption is reversible: give the app the model's answer and your key, and the real names come back into it.
| PII entity types | 340+ — names, e-mail addresses, phone numbers, credit cards, SSNs, IBANs, passports, tax IDs, medical record numbers and more, across all global regions |
| Custom patterns | Your own regular expressions for employee IDs, internal codes and proprietary formats, on top of the built-in types |
| Document formats | PDF, DOCX, XLSX, TXT, CSV, JSON, XML |
| Images | PNG, JPG, BMP, TIFF with OCR and visual bounding-box redaction (Expert plan and above) |
| Batch processing | Many files at once, with filename patterns, per-entity rules and JSON/CSV summary exports |
| Reversible anonymization | AES-256-GCM, multiple keys for different purposes |
| Local vault | History, settings and keys in an AES-256-GCM encrypted database, secured by a 24-word BIP39 recovery phrase, with a PIN for daily unlocking |
| Interface languages | 48, including right-to-left scripts |
| Network use | None for detection or anonymization. Licence activation and optional model downloads are the only times the app talks to a server |
| Local API / MCP server | A loopback HTTP + Model Context Protocol server so agents such as Claude Desktop, Cline or Cursor can anonymize before a prompt leaves the machine (Enterprise plan — talk to us) |
One-time payment, lifetime licence — there is no subscription.
| Plan | Price | Machines | Includes |
|---|---|---|---|
| Free | €0 | 1 | Text anonymization, encryption support, de-anonymization |
| Basic | €149 once | 3 | Everything in Free, plus text-file support |
| Pro | €399 once | 3 | Everything in Basic, plus all document formats and batch processing |
| Expert | €499 once | 5 | Everything in Pro, plus image anonymization and mapping export |
| Enterprise | Contact sales | negotiated | Everything in Expert, plus the Local API / MCP server and volume licensing |
Current prices and the full comparison table: anonym.plus/pricing.html.
A cloud PII-redaction API asks you to send the very data you are trying to protect to a second company in order to get a redacted copy back. That is one more vendor in the data path, one more sub-processor to assess, and one more place a breach can happen. anonym.plus removes that hop: detection and anonymization run in a process on your own machine, so under the GDPR there is no transfer to justify, because there is no transfer.
Regulatory context this is built for — verifiable references, not marketing claims:
- GDPR — Regulation (EU) 2016/679. Article 4(5) defines pseudonymization; Recital 26 sets out when data is anonymous and outside the Regulation's scope; Article 32 requires appropriate technical measures; Article 33 gives a 72-hour breach-notification window.
- EU AI Act — Regulation (EU) 2024/1689, which governs putting personal data into general-purpose AI systems.
- HIPAA (United States, 1996) — the Safe Harbor method lists 18 identifiers that must be removed from protected health information.
- Applies across all 27 EU member states.
Does anonym.plus send my documents anywhere? No. Detection and anonymization happen entirely on your device. The only network calls the app makes are licence activation and, if you ask for one, a language-model download.
Does it work without an internet connection? Yes. The detection engine is bundled with the installer, which is why the download is large. After installation the app is fully functional offline.
Can I get the original text back? Yes, if you anonymized with the encryption mode. Anonymization with AES-256-GCM is reversible with your key; redact, mask and hash are not, by design.
Is there a subscription? No. Every paid plan is a one-time payment for a lifetime licence, valid for the major version you bought and the machine count listed above.
Which file formats are supported? PDF, DOCX, XLSX, TXT, CSV, JSON and XML, plus PNG, JPG, BMP and TIFF images with OCR.
How many kinds of personal data can it find? 340+ entity types, and you can add your own regular expressions for identifiers specific to your organisation.
Can an AI agent call it? Yes, through the Local API / MCP server, which is part of the Enterprise plan. It listens only on loopback, requires a bearer token, and is off until you enable it.
Which languages does it support? The interface is available in 48 languages. Detection uses spaCy models; English is bundled and 20+ further models install on demand.
More answers: anonym.plus/faq.html.
The application checks this repository for new versions. Each release carries a
signed update-manifest-<os>-<arch>.json whose payload names the version, the
download URL, the file size and the SHA-256, verified in the app against an Ed25519
public key compiled into the binary. On Windows the update installs itself; on macOS
and Linux you download and install the new package yourself.
- Support and sales: anonym.plus/contact.html
- Terms of Service · Privacy Policy · Imprint
- Built on Microsoft Presidio and spaCy, on ISO 27001 infrastructure.
Issues in this repository are for problems with the downloads and releases themselves. For anything about using the application, please use the contact form — it reaches a person.