BiVelio Shield
Your data never reaches the model.
Keeps personal data and secrets out of ChatGPT, Claude and any other AI — caught and swapped before they ever leave your device or your servers. A free browser extension for people; a self-hosted gateway for developers and teams.
Available on Chrome, Edge & Brave · Firefox & Safari coming
Works with ChatGPT (OpenAI) & Claude (Anthropic)For everyone · Browser extension
Prefer zero setup? Get BiVelio Shield for your browser.
No code, no server, no account. The extension is in early access while its Chrome Web Store listing is under review — write to us and we'll send it, plus a note the day it goes live.
Write to us and we'll send you the extension today, plus a note the moment it is published on the Chrome Web Store.
Open ChatGPT or Claude and write normally — the extension runs quietly in the background.
Emails, cards, IBANs, IDs and secrets are auto-redacted, then restored in the reply. Your data never leaves your device.
- Free
- 100% local
- No account
Try it live
See it redact — and put it back.
Paste a support ticket, a code snippet, a customer record. Watch sensitive values get pseudonymised or redacted before they'd reach the model, then restored on the way back — all in your browser. Nothing you type leaves this page.
195 / 20,000
Hola, soy Marta y necesito ayuda con mi cuenta. Mi correo es [BV:EMAIL:ee14950f10] y mi teléfono [BV:PHONE_ES:27278110ce]. Adjunto mi DNI [BV:SPANISH_DNI:3524006bcd] y el IBAN [BV:IBAN:7c82805149]erificación.
Hola, soy Marta y necesito ayuda con mi cuenta. Mi correo es marta.ruiz@empresa.es y mi teléfono +34 612 345 678. Adjunto mi DNI 12345678Z y el IBAN ES9121000418450200051332 para la verificación.
This runs the gateway's deterministic layer (checksum-gated IDs, IBAN mod-97, Luhn, secrets) ported to your browser — the same algorithms the server runs, with 0 values leaving your device. Names & free-text PII are the licensed NLP layer, not shown here.
What it catches
Strong on the data that has a shape.
Structured identifiers are checksum-validated, so false positives stay near zero. Secrets are treated as incidents, not personal data.
Structured identifiers
DNI/NIE/NIF/CIF, IBAN (mod-97), cards (Luhn), ES/AD phones, email, IPv4 — every match validated by its checksum, then reversibly tokenised so the value round-trips: zero data loss.
Secrets & keys
OpenAI/Anthropic/AWS/GCP/GitHub/Stripe keys, JWT (header-verified), PEM private keys, connection strings. Detected → blocked → treated as compromised.
Names & places (NLP)
Multilingual NER (Presidio + spaCy, ensembled with GLiNER) for people and locations that have no structural signature — es · ca · fr · en · pt · de tuned, ~100 more languages via GLiNER.
Tenant dictionaries
Codenames, unannounced clients, internal labels — the confidential data no generic model knows about, declared per tenant.
Measured, not claimed
Numbers reproduced from code.
The deterministic layer on a seeded, multilingual corpus with hard negatives. Run it yourself: make benchmark.
Contextual-PII (NLP) layer, reported honestly: oracle recall 0.99, auto F1 0.94, combined residual leak ~3.25% — we do not claim 100% on free-text names. *False-positive rate near zero because every structured match passes a checksum.
For developers & teams
The gateway & SDK
Self-hosted, fail-closed DLP between your services and any LLM. Point your OpenAI/Anthropic SDK at it — nothing sensitive reaches the provider.
Pricing
One price. Your data stays yours.
No free plan to churn on, no trial — see it live in the Playground, then subscribe to run it in your app. Per seat, in EUR.
Billed per seat. Or €39 / seat / yr (save ~19%).
A seat is an active machine or service identity, not a person — billed per seat on your subscription.
- Every detector + the NLP contextual-PII layer
- 114 GDPR data types + Art. 9 special categories
- Audit dashboards and managed rule updates
- Your prompts never leave your infrastructure
Why it can be this affordable
- We don't move your data. Your LLM traffic is inspected in place — we only ever see counts and decisions, never prompts, values or tokens.
- You host the heavy part. Detection runs on your CPU and local models on your infra; our servers only license, distribute rules and report.
- Infra scales with revenue. It starts on one small EU VM and only grows when paying customers cover the next tier.
- The report is the meter. Billing reads the same value-free audit events you verify above — no black box.
Ready when you are
Ready to use AI privately?
Ask for early access to the extension, or set up the self-hosted gateway for your app or team today.