BiVelio Shield
Your data never reaches the model.
Keeps personal data and secrets out of ChatGPT, Claude and any other AI — caught and swapped before they ever leave your device or your servers. A free browser extension for people; a self-hosted gateway for developers and teams.
Available on Chrome, Edge & Brave · Firefox & Safari coming
Works with ChatGPT (OpenAI) & Claude (Anthropic)For everyone · Browser extension
Prefer zero setup? Get BiVelio Shield for your browser.
No code, no server, no account. Install the free extension and your sensitive data is redacted right on your machine — before it ever reaches ChatGPT or Claude.
Add BiVelio Shield to Chrome, Edge or Brave in one click. Nothing to configure.
Open ChatGPT or Claude and write normally — the extension runs quietly in the background.
Emails, cards, IBANs, IDs and secrets are auto-redacted, then restored in the reply. Your data never leaves your device.
Firefox & Safari coming- Free
- 100% local
- No account
Try it live
See it redact — and put it back.
Paste a support ticket, a code snippet, a customer record. Watch sensitive values get pseudonymised or redacted before they'd reach the model, then restored on the way back — all in your browser. Nothing you type leaves this page.
195 / 20,000
Hola, soy Marta y necesito ayuda con mi cuenta. Mi correo es [BV:EMAIL:ee14950f10] y mi teléfono [BV:PHONE_ES:27278110ce]. Adjunto mi DNI [BV:SPANISH_DNI:3524006bcd] y el IBAN [BV:IBAN:9629b822e9] para la verificación.
Hola, soy Marta y necesito ayuda con mi cuenta. Mi correo es marta.ruiz@empresa.es y mi teléfono +34 612 345 678. Adjunto mi DNI 12345678Z y el IBAN ES9121000418450200051332 para la verificación.
This runs the gateway's deterministic layer (checksum-gated IDs, IBAN mod-97, Luhn, secrets) ported to your browser — the same algorithms the server runs, with 0 values leaving your device. Names & free-text PII are the licensed NLP layer, not shown here.
What it catches
Strong on the data that has a shape.
Structured identifiers are checksum-validated, so false positives stay near zero. Secrets are treated as incidents, not personal data.
Structured identifiers
DNI/NIE/NIF/CIF, IBAN (mod-97), cards (Luhn), ES/AD phones, email, IPv4 — every match validated by its checksum, then reversibly tokenised so the value round-trips: zero data loss.
Secrets & keys
OpenAI/Anthropic/AWS/GCP/GitHub/Stripe keys, JWT (header-verified), PEM private keys, connection strings. Detected → blocked → treated as compromised.
Names & places (NLP)
Multilingual NER (Presidio + spaCy, ensembled with GLiNER) for people and locations that have no structural signature — es · ca · fr · en · pt · de tuned, ~100 more languages via GLiNER.
Tenant dictionaries
Codenames, unannounced clients, internal labels — the confidential data no generic model knows about, declared per tenant.
Measured, not claimed
Numbers reproduced from code.
The deterministic layer on a seeded, multilingual corpus with hard negatives. Run it yourself: make benchmark.
Contextual-PII (NLP) layer, reported honestly: oracle recall 0.99, auto F1 0.94, combined residual leak 4.875% — we do not claim 100% on free-text names. *False-positive rate near zero because every structured match passes a checksum.
For developers & teams
The gateway & SDK
Self-hosted, fail-closed DLP between your services and any LLM. Point your OpenAI/Anthropic SDK at it — nothing sensitive reaches the provider.
Try it in 30 seconds
Two commands in your terminal and you see it: sensitive data goes in, replaced data comes out. The same command then works in your scripts and CI.
$ pip install bivelio-privacy-gateway
$ echo "IBAN ES91 2100 0418 4502 0005 1332" | bpg scan
IBAN [BV:IBAN:49993624f2]One line to integrate
Your AI traffic goes through your own gateway, in your infrastructure: it replaces sensitive values before forwarding each request to the provider and returns them restored in the response. For your code it is one line: the address.
client = OpenAI(
base_url="https://bpg.internal/v1",
)Pricing
One price. Your data stays yours.
The deterministic core is free and self-hosted, forever. Pro adds the NLP layer — see it live in the Playground, then subscribe to run it in your app. Per seat, in EUR.
Billed per seat. Or €39 / seat / yr (save ~19%).
A seat is an active machine or service identity, not a person — billed per seat on your subscription.
Prices exclude VAT. BiVelio Shield is business software: a valid EU VAT number is required at checkout, and the reverse charge applies.
- Every detector + the NLP contextual-PII layer
- 122 GDPR data types + 14 Art. 9 special categories
- Audit dashboards and signed managed rule bundles you install
- Attachment redaction: PDF, Word, Excel & text files rewritten locally before they upload
- Self-hosted: your prompts never leave your infrastructure
Why it can be this affordable
- We don't move your data. Your LLM traffic is inspected in place, on your own infrastructure — the gateway and the extension send us nothing. The Sandbox on this site is the exception and it is optional: text you paste there is processed on our EU server, transiently, and is never stored.
- You host the heavy part. Detection runs on your CPU and local models on your infra; our servers only license and report. Managed rule updates are signed offline and applied by you.
- Infra scales with revenue. It starts on one small EU VM and only grows when paying customers cover the next tier.
- The report is the meter. Billing reads the same value-free audit events you verify above — no black box.
Ready when you are
Ready to use AI privately?
Install the free browser extension in one click, or set up the self-hosted gateway for your app or team.