PII Shield — your client data stays yours
Before any sentence you speak or type leaves the Germany-hosted server, the open-source PII Shield replaces every real client name, person, organisation, and matter reference with a stable placeholder (e.g. ORG_1, PERSON_2,CASE_3). The AI parser only ever sees the placeholders. The original names are restored locally before the entry is shown back to you and stored.
This is the canonical primitive from the open-source DONNA repo — you can read its 103 lines of stdlib Python and its 170-line test suite at chiefofstaff-legal/nexus/backend/services/pii_shield.py. AGPL-3.0. Self-hosters get the same protection.
As-is public demo. The shield is best-effort pattern-based redaction, not a guarantee. Use professional judgement with privileged content. Provided as-is under AGPL-3.0 with no warranty of accuracy, availability, or fitness for legal practice; your firm remains responsible for compliance, confidentiality, and the safekeeping of client matter. By signing up you accept these terms.