Contracts & agreements
Ask what a clause means or who bears a deadline — the counterparty's name and figures never reach a model provider's logs.
The private document library Read it here.
Read it here.
Never send it there.
The contract, the case file, the letter that names a real client, patient or source — the document you most need help reading is exactly the one you can't paste into a public AI chat. cloak-docs is a shelf that lives only in your browser: add a document, and before a word ever leaves your device, every name, date and identifier is sealed with a realistic brass surrogate. Ask a question, get a summary, request a redline — the AI reads a document about people who don't exist; your device restores the real ones in the answer.
- 0 raw-PII bytes posted
- 3 services · 4 formats
- Signed on-device receipt
Your library
Extracted and cloaked on your device. Nothing here is ever uploaded.
Drop a document, or click to choose one — PDF, Word (.docx), .txt or .md.
No document handy? Try a sample
Loading your library…
Choose a document from your library to begin.
Or add one first — it's extracted and cloaked on-device the moment it lands on the shelf.
The documents that can't go anywhere else
Case files & intake notes
Summarised or redlined with the client re-sealed, DOB and case refs included, ready for the file.
Research sources
Ask a source document a question without exposing who the interview subject or patient actually is.
Personal records
A lease, a medical letter, a reference — read and understood on your own shelf, in any of the scripts they're written in.
From shelf to answer, in four moves
Add — on your device
Drop a PDF, Word document, text file or Markdown note. It's extracted to plain text entirely in your browser and kept only in IndexedDB — nothing is uploaded, ever.
Seal — before it can travel
A WebAssembly engine plus a multilingual name model find every name, email, phone, address, card and reference number — across Latin, Cyrillic, Arabic, Devanagari and CJK — and stamp a realistic surrogate over each. Zero network.
Ask — sealed only
Only the sealed question + document excerpt is sent to the model, through the CloakAPI gateway with a cryptographic pre-tokenisation proof. The real values — and the map back — stay in the tab.
Restore — yours again
The answer returns carrying the same seals; cloak-docs maps them back to your real values on-device, signs a receipt attesting 0 raw-PII ever left, and hands you the finished answer.