This page is available in English and Polish. It is shown here in English.
Windows pilot, macOS and Linux soon
Maskeno finds personal data in contracts, court filings, scanned pages and medical files, and covers it on your own computer, before the text goes to an AI service or to another party. The review screen shows every cover and lets you change it before you export.
Invented document, pre-recorded. This is not a live scan.
Services Agreement (excerpt)
This Agreement is made on 14 March 2025 in Warsaw between Harbor Lane Logistics Ltd, with its registered office at 12 Example Street, 00-001 Warsaw (the Client), represented by Thomas Whitfield, and Elena Marchetti, ID card no. ABX 004455 (the Contractor).
1. The Client pays the fee to account PL61 1090 1014 0000 0712 1981 2874 within 14 days of the invoice. Notices to the Contractor go to [email protected] or +48 123 456 789.
2. Elena Marchetti performs the work personally and reports to Thomas Whitfield.
3. Any dispute is heard by the District Court in Gdańsk. Earlier proceedings between the parties are recorded under XV C 274/24.
Signed for the Client: Thomas Whitfield
Signed for the Contractor: E. MARCHETTI
This Agreement is made on <PRIVATE_DATE_1> in Warsaw between <PRIVATE_ORG_1>, with its registered office at <PRIVATE_ADDRESS_1> (the Client), represented by <PRIVATE_PERSON_1>, and <PRIVATE_PERSON_2>, ID card no. <PRIVATE_ID_1> (the Contractor).
1. The Client pays the fee to account <ACCOUNT_NUMBER_1> within 14 days of the invoice. Notices to the Contractor go to <PRIVATE_EMAIL_1> or <PRIVATE_PHONE_1>.
2. <PRIVATE_PERSON_2> performs the work personally and reports to <PRIVATE_PERSON_1>.
3. Any dispute is heard by the District Court in Gdańsk. Earlier proceedings between the parties are recorded under <PRIVATE_ID_2>.
Signed for the Client: <PRIVATE_PERSON_1>
Signed for the Contractor: E. MARCHETTIPossibly missed. Go to the review step
Redacted view shown. 13 items replaced by placeholders. One possible miss is left for the reviewer.
Scope
Each kind of detail is replaced by a numbered placeholder, so the text stays readable and repeated mentions of a name, company or account share a number.
| Kind | What it includes | Placeholder |
|---|---|---|
| Names | People. Some inflected forms are linked to the name they come from. | <PRIVATE_PERSON_1> |
| Organisations | Companies, clients and counterparties (in the legal and secure modes). Courts and public bodies from a built-in list stay readable. | <PRIVATE_ORG_1> |
| Addresses | Postal addresses. | <PRIVATE_ADDRESS_1> |
| Dates | Dates, including dates of birth. | <PRIVATE_DATE_1> |
| Identifiers | National ID and tax numbers such as PESEL and NIP, and Polish court case numbers (sygnatury akt). | <PRIVATE_ID_1> |
| Accounts | IBAN and bank account numbers. | <ACCOUNT_NUMBER_1> |
| Contact details | E-mail addresses and phone numbers. | <PRIVATE_EMAIL_1><PRIVATE_PHONE_1> |
| Credentials | Passwords, access codes and keys, for example API keys. | <SECRET_1> |
The modes are fixed and cannot be customised.
For contracts and legal documents: persons, organisations, addresses, dates, contact details and identifiers.
For clinical documents: persons, dates, identifiers, addresses and contact details. Patient record numbers are not recognised as a separate kind.
Aims for few false alarms: account numbers, passwords and keys, identifiers, e-mail addresses and phone numbers, plus persons, organisations, addresses and dates. For Polish text it looks for names and addresses less thoroughly, so use legal or medical for those.
Passwords, private keys and access codes. Most other personal data is left alone.
Review
Detection misses things and sometimes covers too much. The review screen lists every item it found, with a choice to redact it or keep it, and a separate list shows places that look like personal data but are not covered. Try it on the signature block.
Items you do not reject are masked in the export. An item you keep stays visible.
Suggestions change nothing until you redact them. You can also mark one as not personal data.
Maskeno rates how well it could read each scanned page. If a page was read poorly, export and Ask AI require you to confirm that you checked it. Pages read with the optional local program have no rating.
Ask AI sends your prompt and the masked text of the project. An item you chose to keep, and anything detection did not find, goes out as written.
| Text | Label | Placeholder | Action |
|---|---|---|---|
| Thomas Whitfield | Name | <PRIVATE_PERSON_1> | |
| [email protected] | <PRIVATE_EMAIL_1> |
Places that look like personal data and are not covered by a redaction. These are suggestions: nothing here changes the export until you redact it.
Nothing else looks like personal data.
Signed for the Client: Thomas Whitfield<PRIVATE_PERSON_1>
Signed for the Contractor: E. MARCHETTI<PRIVATE_PERSON_3>
Contact for notices: [email protected]<PRIVATE_EMAIL_1>
This name would be sent as written.
Page 3: Read poorly
How it works
PDF, Word (.docx), images or plain text. The text is taken from the file on your computer.
Scanned pages are read on your computer, never in a cloud. The reader sees the original page, which is why it works only on the device.
Personal data is found on your computer by several detection models working together. For Polish text, the legal and medical modes add an extra check made for Polish.
You redact or keep each item (items you do not reject are masked), then export the redacted text as a plain text file. Ask AI is optional and sends your prompt with the masked text.
Limits
Covering names and numbers does not make a document anonymous in the sense of the GDPR. Roles, dates, places and events around a placeholder stay in the text, and repeated placeholders show how many different people the document is about. The result can still be personal data, so decide who may receive it as you would for the original.
Detection is incomplete and differs by language and by document type. We make no accuracy claim, because there are no measurements on real documents yet. That is why the review screen exists.
The answer from an AI service comes back with the placeholders still in it. The app does not put the original values back, and it keeps no audit log.
The controlled pilot covers Windows only for now. macOS and Linux builds are coming soon.
The app exports the redacted text as a plain text file. Layout, tables and images are not carried over.
The app is written in English and the Polish translation is incomplete. Detection covers 18 languages, which is a separate matter from the interface language.
Questions
No. Detection, reading of scans and redaction all run on your computer. The app does use the internet for a few things: it downloads its detection models and language data for scans, checks the trial and the licence, and checks for updates. They are listed in the privacy policy and none of them is designed to carry document text. Only if you use Ask AI do your prompt and the masked text go to the provider you choose.
PDF, Word (.docx), images and plain text. Scanned pages and images are read on your computer.
Your prompt and the masked text of the project. All of it goes to the service you pick: OpenRouter with your own key, a local AI program on your own computer, or a link that opens ChatGPT in your browser (the link can stay in your browser history). An item you kept, and anything detection did not find, is sent as written. In multi-step requests, earlier answers are sent again without masking.
Not in the app. The answer is shown with the placeholders as they are. The link between a placeholder and the original text stays on your device.
Eighteen: Arabic, Chinese, Czech, Dutch, English, French, German, Hebrew, Italian, Japanese, Korean, Polish, Portuguese, Russian, Slovak, Spanish, Turkish and Ukrainian. Quality varies by language and document type. For Polish, the legal and medical modes add an extra check made for Polish.
Request access
Maskeno Desktop is not publicly available yet. The pilot runs on Windows, and macOS and Linux are coming soon. Tell us what you work with and we will reply by e-mail.