SOLUTION · COMPLIANCE

GDPR-Aligned PII Protection

If your product sends user data into OpenAI, Claude or Gemini, or stores it for AI features, PrivoNest can mask or tokenize personal data before that happens — designed around GDPR's data-minimization and privacy-by-design principles.

Start Free Ask About a DPA

Sample GDPR masking flow EU data

EU customer record

→

PrivoNest Engine

→

AI-ready output

EU customer data, minimized before it reaches a model

English — before

Customer Sophie Laurent, email s.laurent@example.eu, account EU-8847-2231, member since 2019-03-14, based in Berlin, requested a refund.

English — after

Customer <PER>, email <EMAIL>, account <ID>, member since <DATE>, based in <ADDR>, requested a refund.

Français — before

Cliente Sophie Laurent, e-mail s.laurent@exemple.eu, compte EU-8847-2231, cliente depuis le 14-03-2019, basée à Berlin, a demandé un remboursement.

Français — after

Cliente <PER>, e-mail <EMAIL>, compte <ID>, cliente depuis le <DATE>, basée à <ADDR>, a demandé un remboursement.

How the Engine Maps to GDPR Principles

Data Minimization (Art. 5)

Detect and mask names, emails, national IDs, financial and health identifiers before they reach a model, so the AI provider only sees what it needs.

Privacy by Design (Art. 25)

The masking step sits in front of the AI call, not after — protection is built into the workflow rather than bolted on.

Right to Erasure Support

Reversible tokenization means the original value only exists where you choose to store it — deleting your own mapping effectively removes recoverability.

No Training on Your Data

PrivoNest does not sell personal data and does not use customer API payloads to train AI models.

37 EU + Global Languages

Detection works across major EU languages (German, French, Spanish, Italian, Dutch, Polish, and more) with one API contract.

Data Processing Agreement

A DPA is available on request for teams that need one signed before sending any data through the API.

GDPR Capability Checklist

Capability	PrivoNest	Raw prompts to OpenAI/Claude	DIY regex / Presidio
Masks PII before the AI call	✓ Yes	✕ No	! Depends on your build
EU language coverage	✓ 37 languages	! Depends on the model	! Only what you build
Reversible when needed	✓ PV1 tokens	✕ N/A	! You build it
DPA available	✓ On request	! Provider's own DPA only	✕ Internal only
Self-serve, no sales call	✓ Free tier + $9/50k	✓ Yes	✓ Free software

FAQ

GDPR Questions

Can I get a Data Processing Agreement?＋

Yes — contact us and we'll provide one before you send production data through the API.

Does PrivoNest use customer data to train AI models?＋

No. Data sent to PrivoNest is used only to detect, mask, tokenize and — when authorized — restore identifiers. It is never used to train any AI or detection model, and it is not sold or reused for any other purpose.

Which languages does detection cover for EU data?＋

German, French, Spanish, Italian, Dutch, Polish and more — 37 production languages in total under one API contract.