Two products and a service. One question decides which.
May the text leave the machine it starts on? If it may go to a processor in the EU, anonym.legal does the work for you on our servers in Germany. If it may not leave at all, anonym.plus does the work on your own hardware and never sends the text anywhere. And if you are rolling either of them out across a large estate, anonymize.solutions does the implementation and the scaling with you.
The offer at a glance
Deterministic detection, 5 protection operators, one of them reversible
Both products share the core protection methods. They ship different catalogues, because they are released on different cycles: 267 recognised types in anonym.legal, 317 own pattern recognisers in anonym.plus, 48 languages hosted. About 70 % of detections come from checksum and pattern rules rather than from a model — and every rule is deterministic, so a detection log re-run on the same engine build, models and configuration is meant to produce the same result — not yet verified with a long-running test. anonym.legal reaches your people through these channels; anonym.plus is a single desktop program.
- REST API
- MCP server
- Chrome extension
- Microsoft Office add-in
- LibreOffice extension
- Desktop application
- Nextcloud app
anonym.legal
Hosted in Germany. The text is sent, encrypted, to our servers.
Free, then €3, €15 or €29 a month
Self-service at anonym.legal
Detailsanonym.plus
Runs on your own machines. The text never leaves them.
Free for one machine, then €149, €399 or €599 once; Enterprise from 10 client connections, through sales
Self-service at anonym.plus; Enterprise set up with you
DetailsImplementation and scaling
For large estates, delivered by anonymize.solutions.
By agreement
The team behind both products
DetailsLegal · Health · Finance · Education · Software · Public sector
A package is a detection preset tuned to the sector’s identifiers, the document templates for the handover you actually make, and the evidence pack your auditor asks for. The presets ship; the templates and the evidence pack are assembled with you. Verticalisation happens here and not in the name — one sender, one agreement, one place to audit.
The desktop app of anonym.legal is a client for the hosted engine: the text goes to our servers in Germany, exactly as it does from the web app. The desktop app of anonym.plus carries the whole engine with it and sends the text to 127.0.0.1 and nowhere else. Always ask which product a desktop app belongs to.
Both are running today and you can open them in the next minute: the hosted platform at anonym.legal with its API, add-ins and browser extension, and the local client at anonym.plus, currently version 8.8.15. They shipped before this page existed.
anonym.legal
Teams that already work with an EU processor under a signed agreement: a law firm, a claims team, a school office, a product organisation — and every developer who wants a working key this afternoon.
The constraint behind it. The text may leave the building, provided it goes to a processor in the EU under a signed agreement. For this buyer that is normal, not a concession.
- A self-issued API key: confirm your e-mail and the key exists — no sales call, no waiting list
- Web app, desktop app, Microsoft Office and LibreOffice add-ins, Chrome extension, Nextcloud apps, a REST API and an MCP server
- Billed in tokens rather than seats: the REST API from Basic, MCP from Pro
- A signed processing agreement and the sub-processor list, without asking twice
What it costs: Free, then €3, €15 or €29 a month · How you get it: Self-service at anonym.legal
anonym.plus
A hospital group, a bank, a public authority, a defence supplier — and a sole practitioner whose files may not leave the laptop. Anyone whose answer to “may the text leave?” is no.
The constraint behind it. Not “encrypted in transit”. Not sent. The desktop engine runs on the machine it is installed on and makes no network call to process a document; Enterprise keeps the text on a server inside your own network. This is the buyer every cloud vendor has to turn away.
- The complete detection engine on the machine, usable without internet after the one-time activation
- Bought once, per machine: a perpetual licence that keeps working whether or not you ever deal with us again
- Enterprise, our flagship: the anonym.plus engine as a server in your own network, from 10 client connections, open-ended — and on a single machine, a local REST API and MCP server bound to 127.0.0.1
- Support and new versions as a separate, optional decision
What it costs: Free for one machine, then €149, €399 or €599 once; Enterprise from 10 client connections, through sales · How you get it: Self-service at anonym.plus; Enterprise set up with you
Implementation and scaling
Organisations rolling anonymization out across many machines, departments or their own products: enterprises, public bodies, system houses, software vendors.
The constraint behind it. The products do the anonymization. Planning the Enterprise server, sizing it to your hardware, connecting your clients and fitting it into your own systems is work — so we do it with you, as a service, rather than pretend it is a feature.
- Personal consultation, on demand rather than as a package
- Setting up anonym.plus Enterprise as a server in your network, sized to your hardware
- Custom builds and integration into your own software through the local API and MCP server
- White-label: a custom build on anonym.plus Enterprise, under your name
What it costs: By agreement · How you get it: The team behind both products
The questions that actually separate them
Not a feature matrix. These are the questions that come up in every evaluation, and the answers differ by product rather than by module.
| anonym.legal — hosted | anonym.plus — local | anonym.plus Enterprise — your server | |
|---|---|---|---|
| Where the text is processed | Hetzner, Falkenstein, Germany | Your machine, on 127.0.0.1. The text is not sent anywhere | Your server, inside your network |
| The API key | Self-issued once your e-mail is confirmed | Generated on your machine when Enterprise switches the API on, and never sent anywhere | Set up with your administrator |
| What it reads | Text plus 9 document formats and 2 image formats (PNG, JPEG) | Text; TXT files from Basic, all formats from Pro; image redaction on Expert — ask us to confirm it on your platform first | What anonym.plus reads, on your server |
| How you buy it | Self-service, monthly, billed in tokens | A perpetual licence; Enterprise through sales | Through sales, from 10 client connections |
| If this company disappears | The service stops | Your installation keeps working. It is a licence, not a rental | The server runs in your network, under the licence agreed with you |
Detection method does not appear in that table, because it does not differ: checksum rules plus trained models in both products.
Arithmetic where arithmetic is possible
No generative model decides what counts as personal data. A card number either satisfies the Luhn check or it does not. Where the answer genuinely depends on context — surname or street name? — a trained model reads it.
Structured data
Card numbers, IBANs, national identity, tax and passport numbers. Luhn and MOD-97 make these arithmetic rather than probability — the part your auditor can re-run without trusting us. About 70 % of all detections come from this path, which is also why the marginal cost is roughly 0.35 euro cents per million characters.
Contextual data
Names, organisations, addresses, dates that only become personal in context. NLP across 48 languages in anonym.legal, meant to be reproducible: the same text on the same engine build, models and configuration should produce the same findings — not yet verified with a long-running test.
5 protection methods
Replace swaps a value for a placeholder so the document still reads. Redact removes it. Mask keeps the shape. Hash is one-way but lets you match two records without knowing either. Encrypt is the reversible one: an authorised reader restores the original while everyone else sees a token. Without that last one a clinical or legal document cannot go back into the file it came from.
A free website scanner: 58 entity types, 24 compliance presets, results held in memory and deleted within 35 minutes of the scan ending. The interface is free and needs no sign-up; the detection behind it runs on the anonym.legal API, so a full scan needs a key from €3 a month. Only the dead-link check works without one. That is awkward to admit on a page selling the API, and it is exactly what the scanner demonstrates.
“Why would we bet on a company your size?”
With anonym.plus you are largely not betting on us surviving. That is unusual enough to be worth two minutes of an evaluation, and it is why the local product exists in the shape it does.
A perpetual licence
Bought once, not rented. If this company vanished tomorrow the copy on your machine keeps working. We are not aware of a cloud product with that shape.
It runs on your hardware
There is no server of ours to switch off, and no shutdown notice that can reach it.
An open-source core
Detection is built on Microsoft Presidio, MIT licensed. The engine is not ours to withdraw and your team can read it. What you buy is everything around it: reversibility, evidence, deployment, liability, support.
Support is optional
Version Access & Priority Support costs €39, €79 or €119 a year and buys new versions and priority response. Declining it does not stop the software working.
Which one is you?
Most organisations know within one sentence: whether the text may leave the building. Everything else follows from that.