Presidio Python Packages

pii-codex

A research python package for detecting, categorizing, and assessing the severity of personal identifiable information (PII)

privaite

Self-hosted PII redaction proxy for LLM APIs and agent CLIs. Scrubs names, emails and secrets from Claude Code, Codex and any OpenAI-compatible app before requests leave your machine, tool-call arguments included, then restores them in the reply. Local detection, zero telemetry.

tarja

Detect and mask Brazilian personal identifiers (CPF, CNPJ, CNS, CNJ, título, CNH) in Portuguese text, with check-digit validation. For LGPD work, DLP pipelines, and stripping PII before text reaches an LLM or a RAG index. Apache 2.0, no dependencies.

allyanonimiser

Australian-focused PII detection and anonymization for the insurance industry — fast, regex+spaCy, no GPU

armos

Open source PII masking middleware for OpenAI and Anthropic SDKs

presidio-rs

A Rust port of Microsoft Presidio — PII detection & anonymization (analyzer + anonymizer + Python bindings)

gorget

Security scanners for LLM prompts and responses: prompt injection, PII (incl. Russian documents), secrets, toxicity. Maintained continuation of LLM Guard; runs without PyTorch.

contextduty

Local-first prompt firewall — stop secrets & PII from reaching AI tools (IDE, git, AI-API proxy, MCP). Built on Microsoft Presidio.

privacyscrubber-mcp

Zero-Trust PII & secrets redaction MCP server for Cursor & Claude. Lightweight, zero-dependency Presidio alternative for Node.js / TypeScript.

presidio-cli

CLI tool that analyze Text for PII Entities with Microsoft Presidio framework.

tarja-presidio

Detect and mask Brazilian personal identifiers (CPF, CNPJ, CNS, CNJ, título, CNH) in Portuguese text, with check-digit validation. For LGPD work, DLP pipelines, and stripping PII before text reaches an LLM or a RAG index. Apache 2.0, no dependencies.

fintech-llm-guard

Eight-layer LLM guardrail pipeline for fintech apps — 51× faster than LLM Guard, 100% block rate, 0% FPR. pip install fintech-llm-guard

pii-lens

Highlight credit cards, emails, phone numbers, SSNs, and US bank numbers in logs and prompts before they hit an LLM.

releaseguard-cli

Scan a dataset/model dir for PII/secrets with Presidio, redact, and generate an HF card + EU AI Act training summary.

guardrailprobe

Stop testing your model. Test your guardrail layer. guardrailprobe fires 78 OWASP LLM Top 10 attack probes across 11 backends — Lakera, NeMo, Presidio, Azure Content Safety, Bedrock Guardrails, LLM Guard, and five more — and outputs signed PDF and JSON comparison reports.

molecare-privacy-gate

Keep sensitive prompts local: a 1,024-weight head on bge-m3 that catches health data, credentials and PII written as plain English, which regex and entity tools miss. A second gate for LLM routers and guardrails. Not a medical device.

mcp-pii-guard-au

MCP server for Australian PII detection — TFN, Medicare, ABN with checksum validation. Compliance audit logging for Australian Privacy Act, GDPR, HIPAA. Built on Presidio + spaCy.

tabayyan

Saudi-aware PII detection & redaction for LLM pipelines. Checksum-validates National ID, Iqama, IBAN, CR, VAT, +966 numbers, passport & more; evasion-resistant; redacts before OpenAI/Anthropic with PDPL/NDMO audit. Local-first, zero telemetry.

piicloak

Enterprise-grade PII detection and anonymization REST API built on Presidio

medguardx-core

Context-aware PII/PHI detection & masking for healthcare data: a stateless OSS engine (on PyPI), a hardened FastAPI service (JWT RBAC + encryption), and a Next.js app. Built on Microsoft Presidio + spaCy, model-configurable (sm/md/lg/trf).

prompt-anonymizer

A buddy check for your prompts — before they reach an LLM. On-device, reversible anonymization that catches the PII you didn't mean to send.

lexiredact

LexiRedact is a python framework middleware/proxy designed to prevent Personally Identifiable Information (PII/PHI) from being permanently stored inside vector databases used in Retrieval-Augmented Generation (RAG) systems.

redactron

Local-only PII redaction for PDFs. Encrypted client vault. Touch ID gated. AGPL-3.0.

scrubfile

Scrub PII from PDFs, images, and DOCX files. Local-only. One command.