Take the personal data outbefore you give a filing to the AI.
What actually happens, at the speed it happens
TRIBUNALE ORDINARIO DI [CITY_1]
Il sottoscritto [FULLNAME_1], con studio in [ADDRESS_1],
C.F. [CF_1], in qualità di difensore di [FULLNAME_2],
nato il [DOB_1], premesso che il bonifico di [AMOUNT_1] disposto
sull'IBAN [IBAN_1] non risulta accreditato,
chiede che il Tribunale voglia ingiungere il pagamento della somma.
The filing stays on this computer. What leaves it is a text that does not take your client with it.
The risk is what you gave the AI, not what it answers.
A name missed in a paste does not come back: once the text is inside a cloud model, nothing returns it. Omissia is built around that sentence.
- 01
The analysis happens on your computer
Detection runs locally, model included. The app talks to two addresses only, updates and your account, and never sends a filing, a value it found, or a filename.
- 02
It replaces nothing you have not seen
Every value goes through a review: you see it where it sits, you decide whether it goes, and values with a checksum (tax code, VAT number, IBAN, cards) are marked as verified.
- 03
The button is inside the editor you already use
An Omissia tab in Word’s ribbon, two entries in LibreOffice’s Tools menu, three entries in Pages’ Services menu. Press Anonymise and the review opens on the same computer, on the document in front of you. Behind that button is the app you installed, not a cloud service.
- 04
The AI’s answer becomes readable again
The mapping between placeholders and values stays on your computer, encrypted with the system keychain. Paste the model’s answer back and the real names return to their places.
- 05
Your own programs can call it too
A switch in Settings opens a port on 127.0.0.1, and from there a script, a shortcut or the firm’s practice software gets the same work the window does: the anonymised text, the entities it found, a redacted PDF. It starts off, it answers only callers on this computer, and a journal inside the app shows what knocked, when and with what outcome.
01 / 07
Open the filing
PDFs including scanned ones, Word, ODT, a photo of a filing or pasted text. Pages with no text are read here, on this computer, a few seconds each. Nothing is copied anywhere: the file stays where it is, and the app just reads it.
Omissia Togli i dati personaliprima di dare un atto all’AI.
Nuovo caso ⌘NLista casi ⌘LLettura del documento
decreto-ingiuntivo.pdf
8 di 8 valori trovati
Tutto su questo computer. Niente esce.
02 / 07
Look at what it found
Twenty-three kinds of data, from names to case numbers. Every detection is shown at the point of the filing where it sits, and whatever is missing you cover by hand: a rectangle removes from the file whatever sits under it.
decreto-ingiuntivo.pdfFerretti c. Costruzioni VialbaRe-identifica…Esporta… ⌘E TRIBUNALE ORDINARIO DI [CITY_1]
Il sottoscritto [FULLNAME_1], con studio in [ADDRESS_1],
C.F. [CF_1], in qualità di difensore di [FULLNAME_2],
nato il [DOB_1], premesso che il bonifico di [AMOUNT_1] disposto
sull'IBAN [IBAN_1] non risulta accreditato,
chiede che il Tribunale voglia ingiungere il pagamento della somma.
03 / 07
Export the anonymised text
Before saving, the app says how many values stay in the clear and which. Then you can hand it to whichever model you use.
decreto-ingiuntivo.pdfFerretti c. Costruzioni Vialba TRIBUNALE ORDINARIO DI [CITY_1]
Il sottoscritto [FULLNAME_1], con studio in [ADDRESS_1],
C.F. [CF_1], in qualità di difensore di [FULLNAME_2],
nato il [DOB_1], premesso che il bonifico di [AMOUNT_1] disposto
sull'IBAN [IBAN_1] non risulta accreditato,
chiede che il Tribunale voglia ingiungere il pagamento della somma.
Esporta il testo mascherato
decreto-ingiuntivo.pdf, solo questo documento. L’originale non viene toccato.
- Valori sostituiti
- 6
- Tipi coinvolti
- 6
- Lasciati in chiaro da te
- 2
Segnaposti generati
CITY ×1FULLNAME ×2STREET ×1CF ×1DATE ×1AMOUNT ×1IBAN ×12 valori restano leggibili: hai scelto di lasciarli in chiaro.
AnnullaSalva come…04 / 07
Put the names back
The AI’s answer comes back with the real values, from an already-anonymised PDF too, which you reopen instead of pasting. Only on this computer, and only if you kept the dictionary.
Re-identificazioneFerretti c. Costruzioni VialbaRe-identifica ⌘⏎ Risposta dell’AIcon segnaposti Il credito vantato da [FULLNAME_2] per [AMOUNT_1] non risulta accreditato sull’[IBAN_1]. Si consiglia di verificare la posizione di [FULLNAME_9].
Testo re-identificatovalori reali Il credito vantato da Marco Ferretti per € 24.500,00 non risulta accreditato sull’IT60X0542811101000000123456. Si consiglia di verificare la posizione di [FULLNAME_9].
[FULLNAME_9] non esiste in questo caso. L’AI ha scritto un segnaposto che non è mai stato generato: resta com’è e va verificato a mano.
05 / 07
The button inside the editor
Word, LibreOffice and Pages: press Anonymise where the document is already open, and the rest happens here. Next to the original a copy appears, with placeholders, revisions resolved, comments removed and properties blanked. If the cleanup fails, the file is not handed over.
decreto-ingiuntivo.docxWord HomeInserisciDisegnoLayoutRiferimentiRevisioneVisualizzaOmissiaAnonimizzaRipristina i nomiOmissia
Una copia accantoIn questo fileDove finisce
Omissia ha finitoTRIBUNALE ORDINARIO DI [CITY_1]
Il sottoscritto [FULLNAME_1], con studio in [ADDRESS_1],
C.F. [CF_1], in qualità di difensore di [FULLNAME_2],
nato il [DOB_1], premesso che il bonifico di [AMOUNT_1] disposto
sull'IBAN [IBAN_1] non risulta accreditato,
chiede che il Tribunale voglia ingiungere il pagamento della somma.
decreto-ingiuntivo — anonimizzato.docx, accanto all’originale, che non è stato toccato.
Revisioni rimaste 0Commenti rimasti 0Proprietà con un nome 0
06 / 07
And it is not only for the AI
A document leaves a firm many times a day, and hardly ever towards a model: the colleague who has to give an opinion, the technical expert, the other side receiving an attachment. The round is the same and it stops one step earlier: you export, and the way back is never used. When you do not need it at all, the case opens without a dictionary: no mapping is built, and none is saved.
decreto-ingiuntivo.pdfFerretti c. Costruzioni Vialba, senza dizionarioRe-identifica…Esporta… ⌘E TRIBUNALE ORDINARIO DI [CITY_1]
Il sottoscritto [FULLNAME_1], con studio in [ADDRESS_1],
C.F. [CF_1], in qualità di difensore di [FULLNAME_2],
nato il [DOB_1], premesso che il bonifico di [AMOUNT_1] disposto
sull'IBAN [IBAN_1] non risulta accreditato,
chiede che il Tribunale voglia ingiungere il pagamento della somma.
07 / 07
A channel for other programs
Switched on in Settings, the app answers on 127.0.0.1 to a script, a shortcut, the firm’s practice software. Same analysis as the window, and a journal that shows who knocked. Nothing of what the requests contained is kept.
ImpostazioniAPI locale Accetta richieste da questo computerNasce spenta. Accendendola, l’app risponde solo a chi la chiama da qui dentro.Accesa- Indirizzo
- non modificabile127.0.0.1
- Porta
- libera5005
Il bottone dentro Word, LibreOffice e Pages passa da qui: sono lo stesso canale.
curl -s http://127.0.0.1:5005/analyze \ -H 'Content-Type: application/json' \ -d '{"text": "Il sig. Rossi, C.F. RSSMRA85M01H501Q"}'{"text": "Il sig. Rossi, C.F. [CF_1]", "mapping": {"[CF_1]": "RSSMRA85M01H501Q"}}Richieste
- POST/integration/open20038 ms
- POST/analyze200412 ms
- GET/integration/result/8Kq2vRt72009 ms
- POST/pdf2001240 ms
- POST/analyze403rifiutata1 ms
- GET/health2002 ms
La riga rifiutata è una richiesta arrivata con la credenziale sbagliata. La credenziale la scrive l’app quando accende il canale, e cambia a ogni avvio.
The price is the simple part.
Every feature in every band: the only thing that changes is how many seats you need. Annual or month to month, as you prefer.
One seat
€12.50per month
billed €149.99 a year · VAT excl.
One lawyer, one computer. You may install it on the laptop you take to a hearing too, as long as the same person uses it.
Two to four seats
€37.50per month
billed €449.99 a year · VAT excl.
A small firm. It is one price for the band, not per seat: four seats for the price of three, and three cost the same as two.
Five seats or more
Let’s talk
From here up we work the price out together, because how it is installed and who holds the licences changes too. Write to us and we will talk.
Frequently asked questions
The questions we get first.
If you still have doubts or questions, you can write to us directly and we will reply within 24 hours.
Confidentiality
Do filings pass through a server of yours?
No, and there is no server they could pass through. The analysis runs on your computer, language model included. The app opens two addresses only, updates and your account, and every request to any other one is cancelled before it goes out.
Does it work without a network?
Yes, in full. Open the app, open a matter, analyse it, export it: none of that asks for the network. It is the test we redo at every release, because a lawyer in a courtroom with no signal opens this app.
Do you collect usage statistics?
Not in the program: no analytics and no automatic error reporting, so what you do on a filing never leaves your computer. On this site, statistics only start if you accept them in the banner, and no counts as much as yes: the page works the same either way.
What does the update check see?
An IP address and a user agent, like any download. The request is a GET on a static file that is the same for everyone: it carries no email of yours, no token, no identifier for this computer. The flip side is that we do not know how many copies are installed.
Where does the mapping between placeholders and real names end up?
On your computer, encrypted with the system keychain. If you delete the matter, the mapping goes with it and from that moment the AI’s answer can no longer be reassembled. That is deliberate: a dictionary that outlives the matter is an archive of personal data nobody asked for.
The product
What is the difference between redacting and anonymising?
Redacting means covering: nothing is left under the black box, and nothing comes back. Omissia substitutes instead, and a substitution can be undone. It puts a stable placeholder where the name was, you paste the text into the model, and when the answer comes back the app puts the real values where they belonged. That is why it exists: you can file a redacted document, but you cannot read an AI answer back onto it. What we do is technically pseudonymisation rather than anonymisation, and we write that down because it is the difference that matters the day you have to explain what you did.
Which files does it read?
.pdf, .docx, .odt, plain text (.txt, .text, .md, .markdown) and the images of a scan (.jpg, .jpeg, .png, .tif, .tiff), plus pasted text. A PDF with no text layer is no longer refused: the pages that do not carry their text are read here on your computer, and an image becomes a one-page PDF the moment it comes in. No script in the document is ever executed. A file renamed to .docx is refused, not opened.
Does it read scanned PDFs?
Yes, and the pages stay on this computer. A PDF with no text layer is no longer refused: the app recognises only the pages that do not carry their text (the ones that already do cost nothing), says which page it is on, and stops with Cancel. A .jpg or a .png of a scan comes in too: it becomes a one-page PDF on the way in. No image leaves the machine.
Is it only for the AI?
No. The model is the occasion most people install it for, not the only place a filing ends up: the colleague who has to give an opinion, the trainee drafting the brief, the technical expert, the client asking to see a precedent close to their own, the other side receiving an attachment. The round is the same and it stops one step earlier: you export and never use the way back. On a PDF the values are not covered but removed from the file, along with the metadata and the properties. When you do not need the way back at all, the case opens without a dictionary and no mapping is built or saved.
Which systems does it run on?
macOS, Windows and Linux. On macOS and Windows it updates itself; on Linux it does not, and the Download page explains why: an AppImage is not signed, and an update that verifies itself has verified nothing.
How reliable is the detection?
Reliable enough to spare you the hunt, never enough to replace the re-read. Values with a checksum (tax code, VAT number, IBAN, cards) are confirmed by an algorithm. Person names are not: a model proposes them, and a proposal can be wrong. That is why the app replaces nothing you have not seen, and why it tells you how many values are still in the clear before you export.
Can I add terms of my own?
Yes. Names of opposing parties, internal abbreviations, company names: they go into the matter’s dictionary and are found like everything else.
Which languages is it in?
The app speaks Italian, English, Slovene and German, menu bar and native dialogs included. This site, for now, Italian and English.
Licence and buying
Do I need an account to use it?
Yes. The program is used with an account: signing up starts a three-day trial with every feature, and when it ends you need to buy.
Do you charge per page?
No. You pay for the seat, and you use as many pages as you need. A four-hundred-page file costs the same as a four-page one, and there is no page pack to buy again halfway through the month.
What happens when the licence expires?
Without an active licence the program cannot be used: when the three-day trial ends you buy, and when a licence expires you renew to keep going.
How do I buy it?
On your own, from the account area: you create an account, try it for three days, and when the trial ends you buy directly from there, where the invoices live too. From five seats up you write to us and the price is agreed together.
Try it on a matter you have already closed.
It is the fastest way to tell whether you need it: take an archived file and look at what it finds.