# Hidden Tokens

> Hidden Tokens is desktop software (macOS and Windows) that pseudonymises files on the user's own computer before any AI reads them. Names, company names, identifiers and amounts in Word, Excel, PDF and text files are replaced with consistent codes (NOM-001, SOC-001, MNT-001…). Claude, ChatGPT, Gemini or Copilot work on the codes; Hidden Tokens then puts the real values back into the AI's output, on the same computer. The key that maps codes to real values never leaves the machine (or the organisation's own file share). Published by Tardigrade SARL (Casablanca, Morocco).

Key facts:

- What it is: local pseudonymisation for generative AI. Not a cloud service, not an AI model, not a proxy run by a vendor. No file, code or key is sent to Hidden Tokens' servers.
- How it works: (1) the user drops documents into a watched folder, or codes them from Claude Desktop; each document is coded in about ten seconds into a `Hidden-Tokens/` subfolder; (2) the AI works on the coded copy; (3) Hidden Tokens decodes the Word or Excel file the AI produced, formatting intact.
- One key per case file: the same person or company gets the same code in every document of the case, so the AI can reason across documents. With the organisation registry, the same client gets the same code on every computer of the organisation.
- What it detects: people, companies, addresses, ID card and passport numbers, company registration numbers, IBANs and bank cards, spreadsheet amounts, case and docket numbers, images and scans, plus sector identifiers (IMSI, IMEI, ICCID, patient and insured IDs, employee and badge IDs, policy and claim numbers). It also flags indirect identifiers ("the CEO of a Lyon biotech, born in 1971").
- Where it works: Claude Desktop (Mac and Windows) through a connector: on a Mac the app opens it in Claude Desktop (click Install); on Windows the app copies it to Downloads and it is added from Claude Desktop's Settings → Extensions → Advanced settings → Install extension; ChatGPT, claude.ai, Gemini and Copilot in the browser through the Hidden Tokens extension (Chrome, Edge, Brave, Arc), which codes each message before it is sent and translates replies back on screen.
- Industry packs (included in every plan): legal, accounting, HR and payroll, telecom, banking and insurance, healthcare.
- Proof: a local "What Claude saw" log re-checks every AI response against the key; signed proof pages; a seal a client can verify; a coverage report per workstation (counts only); the Ledger (since connector 2.46.0, app 0.14.12): a signed, hash-chained monthly register per workstation, never erased (amendments), whose signed page gives the DPO the period attestation, a pre-filled GDPR Article 30 draft entry and EU AI Act deployer-file elements, plus a JSON export.
- Platforms: macOS 13 or later on Apple Silicon only, no Intel Macs (signed and notarised by Apple); Windows 10 and 11, 64-bit, per-user install without admin rights (installer not yet code-signed: SmartScreen warns on first launch). Since app 0.14.2 the app makes no network request by default: it checks for updates only when the user clicks "Check for updates", or once a week if the user accepted that once (only the version number and the IP address go to GitHub).
- Trial: 14 days of full access, no account, no card. Decoding existing files stays free forever, even without a subscription.
- Pricing (excl. VAT): Solo €30 a month, billed €360 a year (1 seat; £26 a month in the UK, MAD 100 a month in Morocco). Firm (2–20 seats: organisation registry, signed admin policy, coverage report, Ledger) and Organisation (21+ seats, from €4,900 a year: key escrow, admin console, priority support, framework agreement) are quoted after a 20-minute demo: https://hiddentokens.com/rdv
- French bar (CNB): the ten fields of the CNB's AI reading grid summary form (June 2025, v1.2) are answered for Hidden Tokens, each with its proof, in the CNB compliance file. Data hosting: the data never leaves the workstation; the publisher (Tardigrade SARL, Morocco) receives no data, key or log. The LLM and RAG fields do not apply: Hidden Tokens is neither; it is the layer upstream of whichever AI tool the firm uses, which then only receives codes.
- Compliance: Hidden Tokens supports GDPR and professional-secrecy compliance; it does not certify it. Under the GDPR, pseudonymised data remains personal data for whoever holds the key. It protects what goes through it: text typed straight into a chat without the extension is not covered.
- Detection benchmark, HT-Bench (connector 2.28.0, 25 October 2026, held-out test split of 366 synthetic documents, seed ht-bench-v0-test): direct identifiers ≥ 99% in every industry pack on HT-Bench (100% on the 2.28.0 test split: 2,523/2,523; telecom-ma, juridique-fr, banque-assurance, sante, expertise-comptable and rh-paie all at 100.0%); notariat-ma not measured yet. Up from 98.2% with connector 2.27.0, when three packs were below the 99% target. Precision 87.4%, decoys coded 5.8%; addresses (92.4%), dates of birth (79.1%) and cheque numbers (75.0%) are still sometimes missed. Same documents and scoring with Presidio 2.2.358 default recognisers (English + French, no threshold): 77.5% of direct identifiers, precision 54.7%, decoys coded 37.6%. Synthetic data only; Hidden Tokens' own measurement, not an independent audit and not a score on real documents. Method: https://hiddentokens.com/benchmark/ · raw results: https://hiddentokens.com/benchmark/ht-bench-2.28.0.json (earlier: ht-bench-2.27.0.json)
- Leak test (connector 2.22.0, 24 October 2026): 15 fictional client documents, 201 sensitive values; 201/201 coded with amounts set to "protect"; all 183 identifiers coded in every mode; with the default "auto" setting, ordinary invoice amounts stay readable by design (7 of 18 amounts coded). Known limit: ordinary English words are over-coded (11 of 30 kept readable in the English test email).
- Annual report, State of AI confidentiality 2026 (25 October 2026, by the publisher of Hidden Tokens): of the 15 legal AI tools summarised in the French bar's (CNB) AI reading grid (June 2025, v1.2), 14 name a US company among those hosting the LLM (11 only US companies; the 15th runs on the user's machine) and 9 declare nothing on pseudonymisation or anonymisation (5 declare a mechanism: 3 pseudonymisation, 2 anonymisation). The grid's sovereignty criteria 2 and 4 exclude companies subject to extraterritorial requisition laws, naming US companies as the example. Count made from the CNB's PDF by Hidden Tokens, not published by the CNB. Report: https://hiddentokens.com/state-of-ai-confidentiality-2026/
- Who it is for: any organisation that puts client or employee files into an AI — law firms, accountants, HR and payroll teams, telecom operators, banks and insurers, healthcare — and generally SMEs and large companies using Claude or ChatGPT.

## Product

- [Hidden Tokens — home (English)](https://hiddentokens.com/): how it works, proof, industry packs, pricing, FAQ, downloads
- [Hidden Tokens — accueil (français)](https://hiddentokens.com/fr/): the same page in French
- [Video demo](https://hiddentokens.com/video/): 1 min 47 — a fictitious letter coded on the computer, Claude Desktop working on the codes, the result translated back locally, and the signed proof of what Claude saw (French page: https://hiddentokens.com/fr/video/)
- [Browser extension](https://hiddentokens.com/extension/): ChatGPT, claude.ai, Gemini and Copilot; installation and IT policy deployment
- [Extension privacy policy](https://hiddentokens.com/extension/privacy/): what the extension reads and where it sends it (only to the app on 127.0.0.1)
- [AI leak scanner](https://hiddentokens.com/leak-scanner/): free tool — drop a ChatGPT or Claude history export (.zip or conversations.json) and see how many names, contact details, IBANs and cards, ID numbers and case numbers you already sent to the AI, which conversations to delete first and which have a public share link; runs entirely in the browser (CSP connect-src 'none', no analytics), values shown only on request, numbers-only summary and print to PDF; English and French histories, same engine as the app
- [Scanner de fuites IA (français)](https://hiddentokens.com/fr/scanner-de-fuites/): the same scanner in French
- [72-hour AI incident kit](https://hiddentokens.com/ai-incident/): free — what a firm does in the 72 hours after someone pasted a client file into ChatGPT, Claude, Gemini or Copilot: contain (revoke share links, export before deleting), measure with the leak scanner, delete conversations and memories, deletion-request letter to the provider (OpenAI, Anthropic, Google, Microsoft channels), a five-question tree on whether to notify the supervisory authority (GDPR art. 33/34, UK GDPR, Morocco Law 09-08, professional secrecy), a letter to the client, a printable breach-register entry (GDPR art. 33(5)), then the lock on every computer; letters and sheet filled in the browser only (CSP connect-src 'none', no analytics, nothing stored); not legal advice
- [Kit incident IA 72 heures (français)](https://hiddentokens.com/fr/incident-ia/): the same kit in French (CNIL, bâtonnier, guide CNB avril 2026)
- [Free anonymizer](https://hiddentokens.com/anonymizer/): free tool — paste a text or drop a Word (.docx), Excel (.xlsx, .xls) or CSV file; names, companies, addresses, emails, phone numbers, IBANs and bank cards, ID and case numbers become codes (NAME-001, COMPANY-001…) before the text goes to ChatGPT, Claude, Gemini or Copilot; paste the AI's answer back and the real names return. Runs entirely in the browser with the app's engine (CSP connect-src 'none', no analytics); the key lives only in the browser tab. Free version: one text or file at a time, up to 3,000 words or 1,000 spreadsheet rows, amounts left readable, Word formatting kept and metadata removed; no PDF, no saved key, no folders (that is the app). It pseudonymises: the key can reverse the codes.
- Free anonymizer pages by use (29 in English). By file type: [An Excel or CSV file](https://hiddentokens.com/anonymize-excel-for-ai/), [A Word document](https://hiddentokens.com/anonymize-word-document-for-ai/), [An email for AI](https://hiddentokens.com/anonymize-email-for-ai/), [A contract for review](https://hiddentokens.com/anonymize-contract-for-ai/), [Meeting notes and transcripts](https://hiddentokens.com/anonymize-meeting-transcript-for-ai/), [A PDF for ChatGPT](https://hiddentokens.com/anonymize-pdf-for-chatgpt/), [A scanned document](https://hiddentokens.com/anonymize-scanned-document-for-ai/), [A PowerPoint deck](https://hiddentokens.com/anonymize-powerpoint-for-ai/), [A WhatsApp or Slack chat](https://hiddentokens.com/anonymize-whatsapp-slack-chat-for-ai/), [Logs and JSON](https://hiddentokens.com/anonymize-logs-json-for-ai/), [HR and payroll data](https://hiddentokens.com/anonymize-hr-payroll-data-for-ai/), [A medical letter](https://hiddentokens.com/anonymize-medical-letter-for-ai/), [A bank statement](https://hiddentokens.com/anonymize-bank-statement-for-ai/), [A CV or resume](https://hiddentokens.com/anonymize-cv-for-ai/), [A customer data export](https://hiddentokens.com/anonymize-customer-data-export-for-ai/); By AI tool: [Text for ChatGPT](https://hiddentokens.com/anonymize-text-for-chatgpt/), [A document for Claude](https://hiddentokens.com/anonymize-documents-for-claude/), [Text for Copilot](https://hiddentokens.com/anonymize-text-for-copilot/), [Text for Gemini](https://hiddentokens.com/anonymize-text-for-gemini/), [Text for Mistral Le Chat](https://hiddentokens.com/anonymize-text-for-mistral-le-chat/), [A question for Perplexity](https://hiddentokens.com/anonymize-text-for-perplexity/), [Text for DeepSeek](https://hiddentokens.com/anonymize-text-for-deepseek/); By task: [Restore an AI answer](https://hiddentokens.com/deanonymize-ai-answer/), [Pseudonymize data](https://hiddentokens.com/pseudonymize-data-online/), [Summarize a confidential document](https://hiddentokens.com/summarize-confidential-document-with-ai/), [Translate with AI](https://hiddentokens.com/anonymize-text-before-ai-translation/), [ChatGPT and the GDPR](https://hiddentokens.com/use-chatgpt-under-gdpr/), [Redact names](https://hiddentokens.com/redact-names-from-text/), [Test data for developers](https://hiddentokens.com/pseudonymize-test-data/)
- [Anonymiseur gratuit (français)](https://hiddentokens.com/fr/anonymiseur/): the same tool in French, with its pages. Par type de fichier : [Un fichier Excel ou CSV](https://hiddentokens.com/fr/anonymiser-excel-ia/), [Un document Word](https://hiddentokens.com/fr/anonymiser-document-word-ia/), [Un e-mail pour l'IA](https://hiddentokens.com/fr/anonymiser-email-ia/), [Un contrat à relire](https://hiddentokens.com/fr/anonymiser-contrat-ia/), [Notes et transcriptions de réunion](https://hiddentokens.com/fr/anonymiser-compte-rendu-reunion-ia/), [Un PDF pour ChatGPT](https://hiddentokens.com/fr/anonymiser-pdf-chatgpt/), [Un document scanné](https://hiddentokens.com/fr/anonymiser-document-scanne-ia/), [Une présentation PowerPoint](https://hiddentokens.com/fr/anonymiser-powerpoint-ia/), [Une discussion WhatsApp ou Slack](https://hiddentokens.com/fr/anonymiser-conversation-whatsapp-slack-ia/), [Logs et JSON](https://hiddentokens.com/fr/anonymiser-logs-json-ia/), [Un fichier RH ou de paie](https://hiddentokens.com/fr/anonymiser-fichier-paie-rh-ia/), [Un courrier médical](https://hiddentokens.com/fr/anonymiser-courrier-medical-ia/), [Un relevé bancaire](https://hiddentokens.com/fr/anonymiser-releve-bancaire-ia/), [Un CV](https://hiddentokens.com/fr/anonymiser-cv-ia/), [Un export de fichier clients](https://hiddentokens.com/fr/anonymiser-export-fichier-clients-ia/); Par IA : [Un texte pour ChatGPT](https://hiddentokens.com/fr/anonymiser-texte-chatgpt/), [Un document pour Claude](https://hiddentokens.com/fr/anonymiser-document-claude/), [Un texte pour Copilot](https://hiddentokens.com/fr/anonymiser-texte-copilot/), [Un texte pour Gemini](https://hiddentokens.com/fr/anonymiser-texte-gemini/), [Un texte pour Mistral Le Chat](https://hiddentokens.com/fr/anonymiser-texte-mistral-le-chat/), [Une question pour Perplexity](https://hiddentokens.com/fr/anonymiser-texte-perplexity/), [Un texte pour DeepSeek](https://hiddentokens.com/fr/anonymiser-texte-deepseek/); Par usage : [Retraduire une réponse](https://hiddentokens.com/fr/desanonymiser-reponse-ia/), [Pseudonymiser des données](https://hiddentokens.com/fr/pseudonymiser-donnees-en-ligne/), [Résumer un document confidentiel](https://hiddentokens.com/fr/resumer-document-confidentiel-ia/), [Traduire avec l'IA](https://hiddentokens.com/fr/anonymiser-texte-avant-traduction-ia/), [ChatGPT et le RGPD](https://hiddentokens.com/fr/utiliser-chatgpt-rgpd/), [Caviarder des noms](https://hiddentokens.com/fr/caviarder-noms-texte/), [Données de test pour développeurs](https://hiddentokens.com/fr/pseudonymiser-donnees-de-test/)
- [AI charter generator](https://hiddentokens.com/ai-charter/): free tool — twelve questions (country, sector, AI tools, data, red lines, internal references, code names, terms left readable, industry packs, governance) produce the organisation's generative-AI confidentiality charter as a Word file, the Hidden Tokens policy source (politique-source.json) that the admin console validates and signs so every seat enforces the same red lines and references, and the folder settings (reglages.json) for one workstation; written entirely in the browser (CSP connect-src 'none', no analytics), legal annexes and national ID-number rules for more than thirty countries (EU member states, the UK, Switzerland, the United States, Canada, Brazil, the UAE, Saudi Arabia, Qatar, Bahrain, Oman, Egypt, Morocco, Tunisia, Algeria, Senegal, Côte d'Ivoire, Nigeria, South Africa, Kenya, India, Singapore, Australia); optional contact form sends its own fields only
- [Générateur de charte IA (français)](https://hiddentokens.com/fr/charte-ia/): the same generator in French
- [CNB compliance file (English)](https://hiddentokens.com/cnb-compliance/): the French National Bar Council's ten-field AI summary form, answered for Hidden Tokens with the proof and limits of each answer; printable PDF
- [Dossier de conformité CNB (français)](https://hiddentokens.com/fr/conformite-cnb/): the same file in French, with its PDF
- [AI and the UK GDPR](https://hiddentokens.com/uk-gdpr-ai/): what the UK GDPR, the ICO and the SRA Code ask when client files go to an AI, what Hidden Tokens does, what it doesn't cover yet in the UK, prices in pounds; [PDF](https://hiddentokens.com/uk-gdpr-ai/hidden-tokens-sheet-uk.pdf)
- [AI, the GDPR and professional secrecy in France](https://hiddentokens.com/france-gdpr-ai/): GDPR articles, the CNB guide, professional secrecy texts, and what Hidden Tokens does for each; [PDF](https://hiddentokens.com/france-gdpr-ai/hidden-tokens-sheet-france.pdf)
- [AI and Morocco's Law 09-08](https://hiddentokens.com/morocco-ai-law-09-08/): security, transfers abroad and professional secrecy for Moroccan organisations using AI; [PDF](https://hiddentokens.com/morocco-ai-law-09-08/hidden-tokens-sheet-morocco.pdf)
- French versions: [Royaume-Uni](https://hiddentokens.com/fr/ia-royaume-uni-uk-gdpr/), [France](https://hiddentokens.com/fr/ia-rgpd-secret-professionnel/), [Maroc](https://hiddentokens.com/fr/ia-loi-09-08-maroc/), each with its PDF
- [Shadow AI diagnostic](https://hiddentokens.com/shadow-ai-diagnostic/): 12 questions, a score out of 36 and three priorities, computed in the browser (French: [diagnostic « IA de l'ombre »](https://hiddentokens.com/fr/diagnostic-ia-de-l-ombre/))
- [Downloads and release notes](https://hiddentokens.com/releases): macOS and Windows installers with SHA-512 checksums
- [IT and security sheet](https://hiddentokens.com/it-security/): for IT departments approving Hidden Tokens on managed workstations: every outgoing host (none by default; github.com for the update check on click or accepted weekly check), where the key and logs live, notarised macOS build (team 2CTJY8T842), per-user unsigned Windows NSIS installer with /S silent install, signed admin policy, what is not done yet (French: https://hiddentokens.com/fr/dsi/)
- [Reporting a vulnerability](https://hiddentokens.com/security/): private reporting to info@hiddentokens.com, scope, acknowledgement within 3 business days, coordinated disclosure; no certification and no published independent audit yet (French: https://hiddentokens.com/fr/securite/)
- [Partners by country](https://hiddentokens.com/partners/): local partners who roll out, train and support Hidden Tokens: AI4X in North Africa (ai4x.academy), Altimax in France and Belgium (+33 1 87 65 03 19); partners never receive files, keys or logs (French: https://hiddentokens.com/fr/partenaires/)

## Academy

Free lessons, no account, on an invented case file (London law firm; French version set in Casablanca). Each lesson answers one question in its first paragraph and is dated by the app and connector versions it was written for. English only for now; French lessons to follow under /fr/academie/.

- [Hidden Tokens Academy](https://hiddentokens.com/academy/): index of the nine lessons and the sample folder (invented data) to download
- [Is it safe to put client data in ChatGPT?](https://hiddentokens.com/academy/start-here/): lesson 0 — what an AI receives from a Word, Excel or PDF file (headers, comments, properties), and what pseudonymisation does and does not change
- [How do I anonymise documents before ChatGPT on Mac or Windows?](https://hiddentokens.com/academy/install/): lesson 1 — install on Mac (Apple Silicon only) or Windows 10/11, SmartScreen's "More info → Run anyway", the first-launch questions, the sample folder
- [How do I anonymise a Word or Excel file before an AI reads it?](https://hiddentokens.com/academy/protect-a-folder/): lesson 2 — watch a folder, drop the sample files, check the coded copy with Ctrl+F; amounts in a contract's text stay readable by design
- [How do I use Claude with confidential documents?](https://hiddentokens.com/academy/claude-desktop/): lesson 3 — install the Claude Desktop connector, set its working folder, start with "Open my Hidden Tokens folder", read a scan with local OCR and proofreading
- [How do I anonymise my ChatGPT prompts?](https://hiddentokens.com/academy/chatgpt-gemini-copilot/): lesson 4 — pair the browser extension, send a message with invented names, check what the site received; attachments, private windows and other apps are not covered
- [How do I de-anonymise the AI's output?](https://hiddentokens.com/academy/decode/): lesson 5 — have Claude write a Word document with codes, decode it on your computer with the real names, formatting intact; the decoded file never goes back to the AI
- [How can I check what data an AI received?](https://hiddentokens.com/academy/prove-what-ai-saw/): lesson 6 — produce the signed "What Claude saw" page, read its counts (exchanges, codes, values found in clear), verify it offline in the app or at /verify-seal
- [How do I anonymise legal, HR or medical documents for AI?](https://hiddentokens.com/academy/industry-packs/): lesson 7 — industry packs (legal, accounting, HR and payroll, healthcare, banking and insurance, telecom), folder rules: a pattern for an in-house reference, a term left in clear
- [How do I show that I can use AI on confidential files?](https://hiddentokens.com/academy/badge/): lesson 8 — drop the signed "What Claude saw" page of the sample folder: checked in the browser (signature, fingerprint, counts), then a shareable badge; not a certification
- [Académie Hidden Tokens (français)](https://hiddentokens.com/fr/academie/): the same Academy in French, lessons published so far
- [Peut-on mettre des données clients dans ChatGPT ?](https://hiddentokens.com/fr/academie/commencer-ici/): leçon 0 en français — ce qu'une IA reçoit d'un fichier Word, Excel ou PDF (en-têtes, commentaires, propriétés), et ce que la pseudonymisation change ou non
- [Comment anonymiser des documents avant ChatGPT, sur Mac ou Windows ?](https://hiddentokens.com/fr/academie/installer/): leçon 1 en français — installer sur Mac (Apple Silicon seulement) ou Windows 10/11, « Informations complémentaires → Exécuter quand même » de SmartScreen, les questions du premier lancement, le dossier d'exemple
- [Comment anonymiser un fichier Word ou Excel avant qu'une IA le lise ?](https://hiddentokens.com/fr/academie/proteger-un-dossier/): leçon 2 en français — surveiller un dossier, y déposer les pièces d'exemple, relire la copie codée par Ctrl+F ; un montant dans le texte d'un contrat reste lisible, c'est voulu
- [Comment utiliser Claude avec des documents confidentiels ?](https://hiddentokens.com/fr/academie/claude-desktop/): leçon 3 en français — installer le connecteur Claude Desktop, choisir son dossier de travail, commencer par « Ouvre mon dossier Hidden Tokens », lire un scan avec OCR sur le poste et relecture
- [Comment anonymiser ses messages à ChatGPT ?](https://hiddentokens.com/fr/academie/chatgpt-gemini-copilot/): leçon 4 en français — jumeler l'extension, envoyer un message avec des noms inventés, vérifier ce que le site a reçu ; pièces jointes, fenêtres privées et autres applis non couvertes
- [Comment dé-anonymiser le résultat de l'IA ?](https://hiddentokens.com/fr/academie/decoder/): leçon 5 en français — faire rédiger un Word avec les codes, le décoder sur le poste avec les vrais noms, mise en forme intacte ; le fichier décodé ne retourne jamais à l'IA
- [Comment savoir quelles données une IA a reçues ?](https://hiddentokens.com/fr/academie/prouver-ce-que-l-ia-a-vu/): leçon 6 en français — produire la page signée « Ce que Claude a vu », lire ses chiffres (réponses, codes, valeurs retrouvées en clair), la vérifier hors ligne dans l'appli ou sur /fr/verifier-sceau/
- [Comment anonymiser des documents juridiques, RH ou médicaux pour l'IA ?](https://hiddentokens.com/fr/academie/packs-metier/): leçon 7 en français — packs métier (juridique France et Maroc, notariat Maroc, expertise comptable, RH et paie, santé, banque et assurance, télécom Maroc), règles du dossier : un motif pour une référence maison, un terme laissé en clair
- [Comment montrer que je sais utiliser l'IA sur des fichiers confidentiels ?](https://hiddentokens.com/fr/academie/badge/): leçon 8 en français — déposer la page signée « Ce que Claude a vu » du dossier d'exemple : contrôlée dans le navigateur (signature, empreinte, comptes), puis un badge à partager ; il atteste un exercice, pas une compétence juridique

## Industries

- [Law firms](https://hiddentokens.com/law-firms/): parties, company and docket numbers coded; courts and legal sources readable
- [Accountants](https://hiddentokens.com/accountants/): client, invoice, VAT and company numbers coded; amounts per column
- [HR and payroll](https://hiddentokens.com/hr-payroll/): employee IDs coded; salaries readable once employees are coded, or hidden by setting; labour-law vocabulary readable
- [Healthcare](https://hiddentokens.com/healthcare/): patient, insured and practitioner identifiers coded; medical vocabulary readable
- [Banking and insurance](https://hiddentokens.com/banking-insurance/): IBANs of any country, BIC, policy and claim numbers coded
- [Telecom](https://hiddentokens.com/telecom/): MSISDN, IMSI, IMEI, ICCID and MAC addresses coded
- [Notaries](https://hiddentokens.com/notaries/): civil status, ID, social security and bank details coded; property, estate and tax vocabulary readable; notarial pack for Morocco, folder rules elsewhere
- [Pages métier (français)](https://hiddentokens.com/fr/#pourqui): the industry pages in French, for France and Morocco
- [L'IA pour les avocats, sans rompre le secret professionnel](https://hiddentokens.com/fr/avocats/): French version of /law-firms/
- [L'IA pour les experts-comptables : travailler sur les grands livres sans exposer les clients](https://hiddentokens.com/fr/experts-comptables/): French version of /accountants/
- [L'IA pour les équipes RH et paie, sans exposer les données des salariés](https://hiddentokens.com/fr/rh-paie/): French version of /hr-payroll/
- [L'IA pour les équipes de santé, sans envoyer l'identité des patients](https://hiddentokens.com/fr/sante/): French version of /healthcare/
- [L'IA pour les banques et les assureurs, sans exposer les données des clients](https://hiddentokens.com/fr/banque-assurance/): French version of /banking-insurance/
- [L'IA pour les opérateurs télécom, sans exposer les données des abonnés](https://hiddentokens.com/fr/telecom/): French version of /telecom/
- [L'IA pour les notaires, sans rompre le secret professionnel](https://hiddentokens.com/fr/notaires/): French version of /notaries/

## Benchmark

- [Benchmark: detection per industry pack, and leak test](https://hiddentokens.com/benchmark/): HT-Bench recall, precision and F1 per pack and per entity type on a held-out synthetic test set, compared with Presidio; method, limits, how to reproduce
- [Banc d'essai (français)](https://hiddentokens.com/fr/banc-d-essai/): the same page in French
- [HT-Bench raw results, connector 2.28.0 (JSON)](https://hiddentokens.com/benchmark/ht-bench-2.28.0.json): versions, seed, SHA-256 of the dataset, every table and the full output of the run
- [HT-Bench raw results, connector 2.27.0 (JSON)](https://hiddentokens.com/benchmark/ht-bench-2.27.0.json): the previous run, kept for history

## Reports

- [State of AI confidentiality 2026](https://hiddentokens.com/state-of-ai-confidentiality-2026/): annual report — professional secrecy, GDPR, Moroccan law 09-08 and the EU AI Act timeline; the French bar's audit of 15 legal AI tools (LLM hosting, pseudonymisation); HT-Bench detection of French and Moroccan identifiers vs Presidio; a market map of AI confidentiality tools; a 10-point checklist; printable PDF
- [État de la confidentialité de l'IA 2026 (français)](https://hiddentokens.com/fr/etat-confidentialite-ia-2026/): the same report in French, with its PDF

## Comparisons

- [Tools to anonymise data before ChatGPT or Claude](https://hiddentokens.com/compare/tools-to-anonymise-data-before-ai/): enterprise plans, manual redaction, Presidio, Limina (formerly Private AI), Hidden Tokens
- [Hidden Tokens vs ChatGPT Enterprise and Claude Enterprise](https://hiddentokens.com/compare/chatgpt-enterprise-claude-enterprise/)
- [Hidden Tokens vs manual redaction](https://hiddentokens.com/compare/manual-redaction/)
- [Hidden Tokens vs Presidio](https://hiddentokens.com/compare/presidio/)
- [Hidden Tokens vs Limina (formerly Private AI)](https://hiddentokens.com/compare/limina-private-ai/)
- [Comparer Hidden Tokens (français)](https://hiddentokens.com/fr/comparer/): the comparisons in French
- [Anonymiser ses données avant ChatGPT ou Claude : les outils comparés](https://hiddentokens.com/fr/comparer/outils-pour-anonymiser-avant-l-ia/): French version of /compare/tools-to-anonymise-data-before-ai/
- [Hidden Tokens ou ChatGPT Enterprise et Claude Enterprise ?](https://hiddentokens.com/fr/comparer/chatgpt-enterprise-claude-enterprise/): French version of /compare/chatgpt-enterprise-claude-enterprise/
- [Hidden Tokens ou caviardage manuel avant l'IA ?](https://hiddentokens.com/fr/comparer/caviardage-manuel/): French version of /compare/manual-redaction/
- [Hidden Tokens ou Presidio ?](https://hiddentokens.com/fr/comparer/presidio/): French version of /compare/presidio/
- [Hidden Tokens ou Limina (ex-Private AI) ?](https://hiddentokens.com/fr/comparer/limina-private-ai/): French version of /compare/limina-private-ai/

## Guides

- [How to use ChatGPT or Claude with client data](https://hiddentokens.com/blog/chatgpt-claude-client-data/): the risks, the four options, and a checklist
- [Pseudonymisation vs anonymisation for AI](https://hiddentokens.com/blog/pseudonymisation-vs-anonymisation-ai/): what the GDPR says and why it matters when you use an AI
- [How to redact a Word or Excel file before an AI reads it](https://hiddentokens.com/blog/redact-word-excel-before-ai/): what manual redaction misses, and a repeatable method
- [AI confidentiality charter: what it must contain](https://hiddentokens.com/blog/ai-confidentiality-charter/): the ten clauses, the applicable law by country, and how to make staff follow it
- [Blog Hidden Tokens (français)](https://hiddentokens.com/fr/blog/): the guides in French
- [Comment caviarder un fichier Word ou Excel avant qu'une IA le lise](https://hiddentokens.com/fr/blog/caviarder-word-excel-avant-l-ia/): French version of /blog/redact-word-excel-before-ai/
- [Comment utiliser ChatGPT ou Claude avec des données clients sans les exposer](https://hiddentokens.com/fr/blog/donnees-clients-chatgpt-claude/): French version of /blog/chatgpt-claude-client-data/
- [Pseudonymisation ou anonymisation : ce que le RGPD change pour l'IA](https://hiddentokens.com/fr/blog/pseudonymisation-ou-anonymisation-ia/): French version of /blog/pseudonymisation-vs-anonymisation-ai/
- [Charte de confidentialité IA : ce qu'elle doit contenir](https://hiddentokens.com/fr/blog/charte-confidentialite-ia/): French version of /blog/ai-confidentiality-charter/

## Optional

- [Licence and subscription agreement (French)](https://hiddentokens.com/fr/conditions/)
- [Organisation framework agreement (French)](https://hiddentokens.com/fr/contrat-cadre/)
- [Verify a Hidden Tokens seal](https://hiddentokens.com/verify-seal/)
- Contact: info@hiddentokens.com · WhatsApp +212 680 092 567