CLEAN THE DATA. KEEP THE MEANING.

Some data should never reach AI.
That's what BALMAS is for.

BALMAS turns sensitive documents into AI-safe copies — without storing your data. Clean. Anonymize. Work with AI.

Clean a file now — freeHow it works
Free account in 30 seconds · 10 documents a month · no credit card
BEFORE · RISK 87/100
John Miller, ID 123456782, phone 050-1234567, purchased services from ABC Ltd for ₪48,750.
↓
AFTER · RISK 8/100
PERSON_001, ID ID_001, phone PHONE_001, purchased services from COMPANY_001 for AMOUNT_001.
Organization→BALMAS→Approved AI·ChatGPT / Claude / Gemini / Copilot / RAG / AI Agents

How it works

Five steps. Your file is never stored.

01 · UPLOAD

Upload any document

PDF, Word, Excel, PowerPoint, TXT, CSV.
02 · SCAN

Smart local scan

Deterministic + heuristic detection: IDs, phones, names, companies, amounts — in your browser.
03 · REVIEW

You decide what stays

Keep, Replace or Remove — per finding, before the file is created.
04 · CLEAN

Consistent replacement

"John Smith" becomes PERSON_003 in all 37 occurrences — context preserved.
05 · DOWNLOAD

Download a clean copy

The clean copy keeps the original format — DOCX stays DOCX, XLSX stays XLSX, PDF stays PDF — with full metadata cleaning.
THE FULL LOOPPRO

Clean → work with AI → get the real data back

Anonymization is only half the job. On PRO, whatever the AI tool returns — a rewritten letter, a summary, an analysis — BALMAS puts the original names and numbers straight back into it, in the same file format.

⌕
Clean
Sensitive values become consistent tokens — in your browser
→
✦
Work with AI
ChatGPT, Claude, Gemini — the document stays anonymous
→
↺
Restore
Upload the AI's output — every token returns to its real value

The replacement map is stored in your browser only — it never reaches any server, including ours.

Three cleaning levels

Choose how conservative to be — or set one policy for the whole organization.

Standard

For everyday work. Cleans PII and clear identifiers: names, IDs, phones, emails, addresses.

RECOMMENDED

Strict

PII + financial data + company, client and project names + business identifiers.

Maximum

Very conservative. Anything that could identify a person, company, project or event — replaced.

PRIVACY ARCHITECTURE

Zero-Retention Processing

Your file is processed in your browser only — it is never sent to any server. Detection is deterministic and local; the original, the preview and the replacement map vanish when the tab closes.

✕Using your files to train models
✕Storing document content in analytics or logs
✕Keeping the original-to-replacement map after you finish
✓Metadata cleaning: Author, Comments, Track Changes
✓Self-Hosted / On-Premise for Enterprise
✓Secrets — API keys, passwords, private keys — replaced at every level and never restored into free text
BALMAS DESKTOP

Your document never leaves this device.

For highly sensitive organizations: a Windows / Mac app where the file never leaves the machine. Full Local Mode.

See the Desktop screen ←
Local Mode · Processing on this device
Document → Local Engine → Clean Copy
0 bytes sent to cloud

Pricing

Start free, upgrade when you need more. Full details ←

FREE · ₪0

10 documents a month · Start cleaning, free

PRO · ₪49/ month

200 documents a month · For daily work with sensitive documents

TEAM · ₪199/ month

1000 documents a month · Up to 10 users · For teams and audit departments

One layer before every AI — for people and for agents.

balmas-mcp is a local MCP server that hands Claude Desktop, Cursor and any AI agent cleaned copies of your files — read-only, folder-allowlisted, on every plan with a free API key. TEAM customers also get the POST /sanitize API for internal pipelines.

How the agent gateway works →
POST /sanitize
{ "file": contract.docx, "level": "strict" }
→ 200 · clean_copy.docx · risk: 8/100

Frequently asked questions

Is my document stored on your servers?

No. The document is processed entirely in your browser — it is never uploaded. Our servers receive only anonymous counters (file type and counts), never content.

Is it safe to upload a document to ChatGPT after cleaning it with BALMAS?

Much safer. Identifiers are replaced with consistent tokens and metadata is stripped, so the AI sees the structure and meaning without personal or business identifiers. You review every replacement before the clean copy is created.

Which file formats are supported?

PDF, Word (DOCX), Excel (XLSX), PowerPoint (PPTX), TXT and CSV. Every file comes back in its original format: Office files stay Office files, and PDFs stay PDFs with the matched values covered in place and the layout intact (scanned PDFs go through OCR).

What's the difference between the cleaning levels?

Standard replaces clear personal identifiers. Strict adds financial data and company/project names. Maximum replaces anything that could identify a person, company or event. You can override any single finding.

Can I map replacements back to the originals?

Yes — you can download a local replacement map (CSV) before closing the page. It exists only on your device; we never see it.

How much does it cost?

A free account includes 10 documents a month. Paid plans raise the quota and add team seats — see Pricing.

We're a company — does every employee need their own account?

Yes, and it's automatic: sign up with your work email and everyone on the same company domain lands in the same workspace, each with a personal API key and their own 10 free documents a month. When the team needs more, one upgrade pools the quota for the whole organization.

Does it catch API keys and passwords too?

Yes. Private-key blocks, JWTs, provider keys (OpenAI, Anthropic, GitHub, AWS, Stripe, Slack and more), password: values and .env credentials become SECRET_001 at every cleaning level — and Round-Trip Restore never writes them back.

Sensitive data stops here.

Before company data goes to AI — BALMAS.

Clean a File — Free