Contracts & agreements
Ask what a clause means or who bears a deadline. Detected names and figures are replaced on-device; values the review misses may still reach the model.
The private document library Read it here.
Read it here.
Send a cloaked copy.
The contract, the case file, the letter that names a real client, patient or source — the document you most need help reading is exactly the one you can't paste into a public AI chat. Work with documents in a browser-based library. Before you approve a question for relay, the browser replaces detected names, dates and identifiers with realistic brass surrogates. When you confirm, the reviewed question is sent to the relay. Values the detector misses may still be sent as written; the relay can make additional safety adjustments. Ask a question, get a summary, request a redline — The AI reads the reviewed document text. cloak-docs restores stand-ins in its answer on this device when they match.
- Detected values are replaced · missed values may go as written
- 3 services · 4 formats
- On-device receipt
Your library
Extracted and stored on your device. When you ask, on-device review replaces values it detects; the library stays in this browser.
Drop a document, or click to choose one — PDF, Word (.docx), .txt or .md.
No document handy? Try a sample
Loading your library…
Choose a document from your library to begin.
Add a document first. Its text is extracted and stored in this browser; on-device review checks it before a request is sent.
The documents that can't go anywhere else
Case files & intake notes
Summarise or redline a case file. On-device review replaces values it detects; it may miss others. Review the text before sending.
Research sources
Ask a source document a question. The detector may miss a name or patient identifier, so review the text before sending.
Personal records
A lease, a medical letter, a reference — read and understood on your own shelf, in any of the scripts they're written in.
From shelf to answer, in four moves
Add — on your device
Drop a PDF, Word document, text file or Markdown note. It's extracted to plain text entirely in your browser and kept only in IndexedDB — this path does not upload the file.
Seal — before it can travel
A WebAssembly engine plus a multilingual name model look for names, emails, phones, addresses and cards — across Latin, Cyrillic, Arabic, Devanagari and CJK — and replace values they detect with realistic surrogates. Structured identifiers match by rule; free-form names rely on the on-device model, so an unusual one can slip past. Review the displayed text before sending; the relay can make additional safety adjustments. This detection step sends no document text.
Ask — review before sending
The reviewed question and extracted document text are sent in a request to the model through the CloakAPI gateway. The gateway request MAC covers the serialized request bytes; it does not prove that every value was detected or replaced. On-device review replaces values it detects; values it misses may be included as written. The re-identification map stays on your device.
Restore — yours again
The answer returns. cloak-docs maps matching stand-ins back to your real values on-device, then issues an on-device receipt. Its SHA-256 hashes text produced by review; the relay may add instructions or adjust that text, so the hash is not the complete network request.