Runs on your computer · Claude, ChatGPT, Copilot
Names stay on your computer.
AI never knows who.
Hidden Tokens replaces the names, identifiers and amounts in your files with codes on your own computer, before any AI reads them. Claude or ChatGPT only receives the coded copy; the key and the real values never leave your machine.
Mac and Windows. No account, no card.
Damages assessed at €1,248,300, payment received on IBAN FR76 3000 6000 0112 3456 7890 189 on 14 March 2025.
- 01Wi-Fi off. Hidden Tokens codes appeal-brief.docx: 7 real values become codes.
- 02Wi-Fi back on. Claude receives
NOM-001,SOC-001… never a name. - 03The answer is decoded on your machine. Network needed to protect it: none.
Not won't.
Can't.
- No serverYour files, your codes and your key never pass through us. There is nothing on our side to breach.
- No accountNothing to sign up for. We don't know who you are, let alone who your clients are.
- Licence checked offlineThe app doesn't need the internet to protect you. Updates only if you turn them on.
Download
Try it tonight. No account, no card.
The desktop app installs everything: the sentinel that codes your folders, the Claude Desktop connector (one click on a Mac, a few clicks in Claude Desktop's settings on Windows), the browser extension, the six industry packs. Fourteen days of full access from your first anonymisation; after that, decoding stays free forever.
Mac, Apple Silicon
Signed and notarised by Apple: it opens without a warning. Updates when you ask, or every week if you choose.
Download for Mac (.dmg)Windows 10 and 11
Per-user install, no administrator rights needed. On first launch Windows shows "unknown publisher": More info → Run anyway.
Download for Windows (.exe)The connector, without the app
Only need Claude Desktop? The .mcpb connector installs with a double-click on Mac, and from Settings → Extensions → Advanced settings on Windows. Without the sentinel, you ask Claude to code each file.
Download the connector- 01Install, then pick a folder to watch.From the menu bar (Mac) or the notification area (Windows).
- 02Drop your documents in it.Each one is coded within ten seconds into Hidden-Tokens/, next to the original.
- 03Work in Claude, ChatGPT or claude.ai.The AI only sees codes; the result comes back in clear, on your machine.
First time? The free Hidden Tokens Academy walks you through your first protected folder on an invented case file, step by step: no account, no real data.
Working in Claude Code or claude.ai? The Claude Code plugin and the seven skills teach Claude the protocol and the recipes of six professions; the app stays the engine.
Latest version: 0.52.0, released on 11 November 2026. SHA-512 checksums and previous versions on the releases page. Need help, or a rollout across several machines? That's what the pilot is for.
The problem
Every file you give an AI leaves your office.
Your teams already use AI: it saves hours on a memo, a contract, a spreadsheet. But the file goes out with your clients' names, their identifiers and their figures. For a lawyer, an accountant or an HR team, that is professional secrecy and GDPR walking out the door.
- Banning AI doesn't work. People use it anyway, on their phones, with no trace.
- Manual redaction doesn't scale. It takes too long, and one missed name is enough.
- Vendor promises can't be checked. You have to trust what happens on their servers.
How it works
The value disappears. The code stays. The key never moves.
Hidden Tokens installs on your computer and plugs into Claude Desktop — and, through its browser extension, into ChatGPT, claude.ai, Gemini, Copilot, Le Chat (Mistral), Perplexity and DeepSeek. It codes the whole case file with a single key: the same client gets the same code in every document and, with the organisation registry, on every machine. Watch the video demo (1:47).
Every document coded in ten seconds
Word, Excel, PDF, text. Names become NOM-001, companies SOC-001, amounts become placeholder values. Before any AI reads them.
Claude only sees tokens
It drafts, summarises, compares, builds formulas and charts, all on codes. The reasoning still holds: only the identity is gone.
The real values, on your machine
Hidden Tokens puts the names and figures back into the Word or Excel file Claude produced, formatting intact. The key never leaves your computer.
Works with
Claude Desktop through the connector; AI chat sites through the Hidden Tokens extension for Chrome and Edge. One key: NOM-001 is the same person everywhere.
Coded connectors
Your mail, calendar and files, without the names.
Claude reads Gmail, Outlook, Drive, OneDrive, SharePoint, Teams, Slack or HubSpot through Hidden Tokens: the connector runs on your computer and the AI only receives codes. Files and Teams are read-only; a message is never sent for you.
- Gmailread, draft
- Google Calendarread, schedule
- Google DriveDocs, Sheets, Slides
- Outlookread, draft
- OneDrivefiles, Excel
- SharePointsites, lists
- Microsoft Teamschats, transcripts
- Slackchannels, threads
- HubSpotCRM, read-only
- Notioncoming
- Salesforcecoming
Enable, sign in, test: three clicks in the Hidden Tokens app, no terminal: see the connectors guide. Switch off Claude's own connector for the same service, or the AI can go through it in clear. New in the app: tell us what you see with your accounts. Names and logos belong to their owners; Hidden Tokens is not affiliated with Google, Microsoft, Slack, HubSpot, Notion or Salesforce.
The dashboard
Watch your shield work.
Every sensitive item Hidden Tokens codes is counted on your own computer, and a live map shows what reaches each AI: coded, held back, or translated back on your screen. One minute, fictitious data.
Read the transcript
- A law firm drops 12 client documents into its protected folder.
- Every name, IBAN or phone number becomes a code, on the computer, before any AI reads a thing.
- The team works with Claude, ChatGPT, Gemini… which only ever receive codes.
- A document the firm's policy forbids sending? The send is held back.
- Replies come back: codes are translated back on screen, on this computer only.
- Not one real value left the computer: 1,248 sensitive items protected, no real value sent to any AI.
What gets protected
Anything that could identify someone.
Including indirect clues: "the CEO of a Lyon biotech, born in 1971" points to someone. Hidden Tokens flags them and can generalise them.
Proof, not promises
You don't have to trust us. You can check.
Everything happens on your computer, so everything can be verified on your computer. By you, by your DPO, and by your own clients.
"What Claude saw"
A local page lists every response the AI received, re-checked against your key. Expected result: zero real values.
Signed proof pages
Change a single figure by hand and the signature breaks. Your DPO verifies the page in a browser, without uploading anything.
A seal for your client
Signed proof that their file went through Hidden Tokens without a leak, which they can verify themselves on the verification page, without uploading anything.
The coverage report
Workstation by workstation: what was protected before reaching the AI, and which machines have stopped using Hidden Tokens. Counts only, never data. It checks your AI charter clause by clause.
The Ledger: proof over time, for your DPO and your auditor
The log proves one reply, the seal one file, the coverage report one moment. The Ledger proves the year: one signed entry per completed month and per workstation, each chained to the previous one, so a line edited or deleted afterwards breaks the chain. Nothing is ever erased: a later audit adds an amendment. From it, one signed page gives your DPO the attestation for the period, a pre-filled draft entry for the GDPR Article 30 record and the elements of the EU AI Act deployer file. Counts only, never a name. Proof that your AI use never leaked a name.
For lawyers: the ten fields of the French bar's (CNB) AI reading grid, answered for Hidden Tokens with the proof behind each one, are in our CNB compliance file (page and PDF). For everyone else: our annual report, State of AI confidentiality 2026, sets out what regulators ask, what AI tools declare and how well personal data is detected (page and PDF). Country by country: United Kingdom, France, Morocco. And two free tools: the 12-question shadow AI diagnostic and the AI charter generator (Word + signed policy).
Who it's for
Any organisation that puts a file into an AI.
If your files mention people, Hidden Tokens belongs in your workflow. Six industry packs, included in every plan, code the identifiers of your sector and keep its vocabulary readable, so the AI can actually work. SMEs, training, CRM: the core engine is enough.
Law firms
Company and docket numbers, prosecutor and appeal references coded; courts, codes and legal sources readable. Privilege stays intact.
Accountants
Invoice, voucher, VAT and tax-filing numbers coded; chart of accounts, taxes and software readable. Amounts follow your setting.
HR and payroll
Employee, badge and contract numbers coded; job titles, labour law and payslip items readable. Once employees are coded, a salary no longer points to anyone; one setting hides the pay levels too.
Telecom operators
IMSI, IMEI, ICCID, MSISDN, MAC addresses, PUK codes coded — CDR export columns ticked by default; plans and service vocabulary readable.
Banks and insurers
IBANs of any country, BIC, policy, claim and cheque numbers coded; regulators, institutions and contract terms readable.
Care, labs, health insurers
Patient, insured, practitioner and batch numbers coded; specialties, exams and common medicines readable.
Free tool · no account · nothing leaves your browser
Write your AI confidentiality charter in about ten minutes. Then make it apply itself.
Twelve questions about your organisation, your AI tools and your red lines. You leave with a charter ready for your counsel or DPO, with the legal annex for your country (more than thirty, from the EU and the UK to the United States, the UAE, Saudi Arabia and India), and the rules that make every computer follow it.
A Word file to adopt
Who may use which AI, what never leaves, how a mistake is reported, the applicable law. Ready to annex to the staff handbook.
A policy your admin signs
Red lines, internal references, national ID numbers, code names. Signed once, applied to every message on every seat.
A monthly check
The coverage report reads the charter clause by clause and says which computers follow it. A charter stops being a PDF.
Guided pilot · 30 days · €1,900, deducted if you order
A firm or an organisation? We install it with you.
The app is public: download it above and try it on your own. The pilot programme is for firms and organisations that want hands-on support: installation on your machines, the organisation registry, a first policy, a first coverage report.
- One watched folderevery new document coded in ten seconds, before any AI reads it.
- 30 days of real useon 5 to 20 seats, success criteria signed at the start, two check-ins and a final debrief.
- €1,900 excl. VAT, deducted in fullfrom your first year if you order within 30 days, plus a certified proof page for your DPO.
Pricing
Solo at €30 a month. Teams on quote, after a 20-minute demo.
14 days of full access, no card, no account. Then a subscription that includes updates, support and the six industry packs. Prices exclude VAT. Not ready yet? Start with the free AI charter generator.
Solo
One seat
Billed yearly: €360 excl. VAT · UK: £26 / month · Morocco: MAD 100 / month
- The desktop app, Mac and Windows, and the Claude Desktop connector
- The browser extension: ChatGPT, claude.ai, Gemini, Copilot, Le Chat (Mistral), Perplexity and DeepSeek coded before sending
- The six industry packs and the web app, unlocked by the same key
- "What Claude saw" log, client seal, updates, email support
Licence and invoice by email, within one business day. Not sure? Book a 20-minute demo.
Firm
2 to 20 seats
After a 20-minute demo. 30-day guided pilot possible, deducted from your first year.
- The organisation registry: same client, same code for everyone, across every case
- A policy signed by your admin: rules, packs, forbidden items
- The coverage report, which checks your AI charter clause by clause, and the Ledger (signed monthly register for your DPO)
- A one-hour onboarding video call
Organisation
21 seats and up · framework agreement
From €4,900 a year · framework agreement
- Escrow and recovery sheet: a lost key is never a lost case
- Admin console; rules and packs pushed to every machine by the policy
- Priority support: reply within 4 business hours, leaks handled first
- Half a day of rollout, yearly attestation drawn from the Ledger, framework agreement (in French)
When your subscription ends you get a 15-day grace period. If you don't renew, coding new files stops, but files you've already coded stay decodable, forever. Bought a lifetime licence before 21 October 2026? It remains valid, updates included.
Demo, pilot, order or quote
Let's talk about your files.
We reply within one business day: the installer and guide for a pilot, a quote in your organisation's name for an order. Once payment is received, you get your licence key and invoice.
Prefer an email? info@hiddentokens.com
FAQ
What people ask us most.
Do my files go through your servers?
No. Coding, the key and decoding all stay on your computer. We receive neither your files nor your codes; only the AI you use receives the coded copy.
Which AI does it work with?
Claude Desktop on Mac and Windows, through a connector: on a Mac the app opens it in Claude Desktop and you click Install; on Windows the app puts it in your Downloads folder and you add it from Claude Desktop's Settings → Extensions → Advanced settings → Install extension. And in the browser, through the Hidden Tokens extension (Chrome, Edge): every message sent to ChatGPT, claude.ai, Gemini, Copilot, Le Chat (Mistral), Perplexity or DeepSeek is coded with your folder's key before it leaves, and replies are translated back on screen.
What about Windows?
The Windows installer (10 and 11, 64-bit) installs without administrator rights and updates when you ask, or every week if you choose. It isn't signed with a Windows certificate yet, so SmartScreen shows "unknown publisher" on first launch: click More info, then Run anyway. Your machine's key is protected by the system (DPAPI), like the keychain on Mac.
Are the codes the same on all our machines?
Yes, with the organisation registry (Firm and Organisation plans): one code key for the whole organisation, encrypted on your own file share, with no server on our side. The same client gets the same code for everyone, in every case, forever. A lost machine loses nothing: a new machine certified by your admin receives everything, and escrow covers the worst case.
What is an industry pack?
A set of rules shipped with the software, switched on per folder or for the whole organisation: it codes your sector's identifiers (an IMEI, a company number, a patient ID…) under their own name, with their check digit, and keeps the trade vocabulary readable so the AI can work. Six packs today, included in every plan; a custom pack is available on quote.
Are the AI's answers as good on codes?
Yes for most of the work: drafting, summarising, comparing, calculating. The reasoning doesn't depend on your client's name. Spreadsheet amounts are replaced with consistent placeholder values, then the real figures are put back into the workbook.
What happens if I stop subscribing?
Coding new files stops after a 15-day grace period. Decoding your existing files never does: you are never held hostage.
Does it make me compliant?
Hidden Tokens supports your compliance; it doesn't certify it. It protects what goes through it: text pasted straight into the chat isn't covered, and reviewing the plan is still required. That's why the Firm and Organisation plans include an AI policy template, a coverage report and the Ledger, a signed monthly register from which the yearly attestation is drawn.
Who is behind Hidden Tokens?
Hidden Tokens is published by Tardigrade SARL (Casablanca, Morocco) and built on its own anonymisation engine.