Data governance & privacy
Canadian vendor providing a container-deployable API that identifies and removes personal identifiers from text before it reaches a model, with optional synthetic replacement and consistent markers. It is a detection and de-identification layer only: no access control, lineage, consent or audit features appear in its API reference.
commercial · generally available · Research snapshot 2026-09-06
Visit the official product source ↗Data governance & privacy
Useful conversation with: Application security engineer, Privacy engineer, ML platform engineer.
Demonstrate the de-identify call redacting 20 PII classes from a prompt and then re-identifying the response, with entity relationships preserved.
Support labels reflect the supplied research. Documentation and vendor claims are not independent product tests. “Not established” means the researcher did not find support; it does not prove a capability is absent.
Documented by provider
The API removes identifiers from one or more strings, with parameters controlling which PII classes are removed, the redaction marker format and whether markers uniquely identify each entity.
Limit: Reference does not state accuracy, throughput or supported languages.
Documented by provider
Supports generating fake entity replacements and preserving relationships so repeated mentions of the same entity map to the same synthetic value; both options are marked beta.
Limit: Beta status means behaviour may change; only 'standard' mode is supported.
Vendor claim
PrivateGPT Headless is offered as a privacy layer that removes 50+ PII types before requests reach ChatGPT and re-identifies the data afterwards.
Limit: Product page dated 2023; current support for other model providers is not established.
Listing does not imply partnership, supplier status, a working DutyGraph integration, or a compliance certification.
Suggest a correction