Data Masking Python Packages

presidio-analyzer

An open-source framework for detecting, redacting, masking, and anonymizing sensitive data (PII) across text, images, and structured data. Supports NLP, pattern matching, and customizable pipelines.

presidio-anonymizer

An open-source framework for detecting, redacting, masking, and anonymizing sensitive data (PII) across text, images, and structured data. Supports NLP, pattern matching, and customizable pipelines.

presidio-image-redactor

An open-source framework for detecting, redacting, masking, and anonymizing sensitive data (PII) across text, images, and structured data. Supports NLP, pattern matching, and customizable pipelines.

presidio-structured

An open-source framework for detecting, redacting, masking, and anonymizing sensitive data (PII) across text, images, and structured data. Supports NLP, pattern matching, and customizable pipelines.

redact-secret

Detect and redact secrets before they reach logs, storage, or LLM context. Deterministic Rust core for JavaScript, Python, Rust, and WebAssembly.

ferret-scan

Find and redact sensitive data before it leaks — a fast, offline CLI and Go library that detects PII, secrets, and credentials in files and streams, scores them with context-aware confidence, and redacts them format-preserving. Nothing leaves your host.

presidio

An open-source framework for detecting, redacting, masking, and anonymizing sensitive data (PII) across text, images, and structured data. Supports NLP, pattern matching, and customizable pipelines.

piighost

Reversible PII masking for LLM agents: piighost replaces personal data with placeholders before the model sees it, then restores the real values in replies and tool calls. LangChain, Pydantic AI, LlamaIndex and Claude Code integrations, plus an OpenAI/Anthropic-compatible proxy.

redact-secret-vault

Reversible redaction for AI workflows: replace secrets with opaque tokens, then restore them only to authorized destinations. JavaScript and Python.

maskops

High-speed PII masking as a Polars plugin, powered by Rust

veil-pii

Reversible PII masking for LLM calls: mask before the prompt leaves your network, restore in the reply, streaming-safe.

odata1c-gate

Local MCP gateway to 1C:Enterprise OData with a pseudonymisation gate: AI agents query a live 1C base, but tax IDs, accounts, phones and names reach the model only as tokens. · MCP-шлюз к OData 1С с гейтом псевдонимизации: агент работает с живой базой, а ИНН, счета, телефоны и названия видит только токенами.

promptmask

Never give AI companies your secrets! A local LLM-based privacy filter for LLM users. Seamless integration with your existing AI tools as a Python library / OpenAI SDK replacement / API Gatetway / Web Server.

traceredact

Redact PII & secrets from LLM prompts, agent traces & tool-call args before they hit your logs. Content-based detection (not just key names), CI-gateable, zero data retained.

redacted-py

Redacting classified documents

wardcat

On-prem detection & anonymization of PII and sensitive data for LLM inputs — hybrid regex + NER + local LLM

dbmask

Discover, mask, and verify sensitive data in SQL databases — an auditable scan → mask → validate workflow for safe database copies.

cloakpii

PII masking + AES-256-GCM encryption + PIPL/PDPA/GDPR compliance reporting for cross-border data transfers. Python CLI.

sieve-redact

Deterministic text masking tool — six modes, byte-for-byte integrity outside matches, receipts without sensitive content. Standard library only. Companion to Sieve Lens.

carnaval

Reversible PII anonymization for LLM pipelines: mask names, emails and bank details before text reaches a cloud LLM, then restore them in the response. Local-first, encrypted vault, 6 languages. Python, Apache-2.0.

masker-db

A Python CLI for deterministic, schema-aware database masking across SQLite, PostgreSQL, and MySQL

mixin-suite

Composable mixins for Python services: correlation-aware structured logging, sensitive-data classification and masking, parameterized retry policies, latency measurement, and notification dispatch

cloakdb

Deterministic database & SQL dump anonymization engine with NIST Format-Preserving Encryption (FPE), Differential Privacy, and O(1) memory streaming.

cyphera

Data protection SDK for Python — format-preserving encryption (FF1/FF3), data masking, and hashing.