Use the best AI models
Without giving your data
Your text
Mario Rossi
The model sees
PERSON_1
The response comes back with the real name.
The demo
What it does, in under 60 seconds
Categories
What gets anonymized
Personal and business data
- Full names
- Company names
- VAT numbers
- Identity documents
- IBANs
- Credit card numbers
- Gender
- Age
- Case and reference numbers
- Land registry data
- Cities
- Phone numbers
- URLs
- Addresses
- Street numbers
- Provinces
- Postcodes
- Amounts
- Dates
- Times
- Licence plates
Cybersecurity data
- Username
- Passwords
- Password hashes
- Secrets and API keys
- TOTP secrets (2FA)
- SSH keys
- SSH fingerprints
- Certificates
- IP addresses
- MAC addresses
- Hostnames
- Windows SIDs
- Device IDs
- Crypto wallets
- Product keys
Support for 6 languages: Italian, English, French, German, Spanish, Dutch
The problem
It is already happening in your company.
You can pretend you don't know. But you already do.
- 48%
of employees use AI against company policy, pasting data into public tools
- 34%
of Italian workers use AI tools their company never gave them
- 39.7%
of the data entered into AI tools is sensitive. Three years ago it was 10.7%
- 0.9%
of employees cause 80% of the leaks: you need a net on the way out, not another course
Your files
Not just what you type.
But also what you attach
A contract in PDF, a price list in Excel, the scan taken with your phone: the AI model sees only the anonymized documents while you read the files in the clear.
- No exceptions
Images, scans, charts
- An image, a scanned PDF or one with pictures in it, a chart inside a document: BlockingBear anonymizes them all.
- The data lives in the pixels, not in the text: OCR finds it and covers it with rectangles at the right coordinates.
- Signatures and stamps included.
- Processing
The anonymized documents
- The model works only on the anonymized documents, in a local sandbox with no network access.
- Pivots, charts, revised contracts: the file it produces contains only placeholders.
- When you download it, the placeholders turn back into the real values. Layout, formulas and styles untouched.
- Central control
You set the rules
- Restrict the choice to models with zero data retention only: one more layer of protection.
- Enforce anonymized chats for everyone: nobody can switch them off.
- Add terms to be anonymized always: clients, projects, internal codes and much more.
Who it's for
See if it's for you
If you've ever had these concerns, BlockingBear is the right tool.
You worry that your personal and company data could be used by outside companies.
Someone on your team has already sent (or you fear they will) a document, a contract or a price list into an AI chat.
A sensitive value was pasted into a chat with an AI model you had never approved.
AI subscriptions have multiplied across departments and you have no idea how much you are really spending.
Every time a new AI tool shows up, someone tries it without asking anyone for permission.
You worry that the way your company uses AI doesn't comply with the GDPR, and you have no real way to verify it.
A note: an OpenRouter account is required
To use the AI models available in BlockingBear, you need an OpenRouter account with an active Management key.
Compliance
What it solves, and what stays your job.
No software makes a company “compliant”: you are still the data controller. What BlockingBear does is turn a few measures that usually live only in a policy into something concrete.
GDPR art. 32
Security of processing
What BlockingBear does
Pseudonymisation happens on your machine, before sending.
What stays yours
The organisational side: policy, training, access control.
GDPR art. 25
Data protection by design
What BlockingBear does
The model provider receives the bare minimum: placeholders instead of data. The mapping table never leaves your network.
What stays yours
Choosing which categories to cover.
GDPR art. 35
DPIA
What BlockingBear does
A per-conversation record: what was covered, and in what form it left. Concrete material to attach.
What stays yours
Writing the DPIA, the records of processing and the notices.
GDPR artt. 28 & 44
Processors and transfers
What BlockingBear does
A single external supplier to declare, and requests pinned to zero-data-retention providers: models without a compliant provider are refused.
What stays yours
Opening an account with OpenRouter.
AI Act art. 50
Transparency
What BlockingBear does
Every file the app produces is marked as AI-generated in its metadata: the duty becomes a property of the file.
What stays yours
Informing people where required; in Italy, Law 132/2025 for professionals.
NIS2 · DORA
Where they apply
What BlockingBear does
It runs inside the company network and the code can be both audited and modified.
What stays yours
Your supplier register, testing, continuity plans.
Installation and support
Everything is open source.
If you want, we provide the support.
The code is public and so is the documentation: if you have in-house IT, you clone the repository and do it on your own. If you run into trouble, or would rather not think about it, we handle installation, configuration and support.
Not sure where to start? Get in touch for a demo.
Installation
On your servers, with your users already set up.
Customisation
Your documents, your terms, the formats of your company.
Support
Regular updates and support by email.
Training
Hands-on sessions for your team on real use cases.
Centralisation
We can help you block the other AI services on your network.
No more subscriptions!
You only pay for what you use through your own API key.
FAQ
Frequently asked questions.
So, how much does it cost?
Our software is open source, under the AGPL-3.0 licence. You pay for AI model usage through your own OpenRouter account.
If you need a hand instead, we can offer support for installation, training and customisations - contact us through the form below to request more information.
Do I need an OpenRouter account?
Yes. The models are used through OpenRouter, so you need an account with its API key: it takes a few minutes on openrouter.ai, and that's where you pay for usage.
Does my data pass through your servers?
No. BlockingBear runs on your machines and there is no BlockingBear cloud service. The only external recipient is OpenRouter, which receives text that is already anonymized.
How do I know if it anonymized everything?
No system finds 100%, so we don't promise it either: you review a document before it enters a chat, original and protected version side by side, and a final check blocks any already-recognised value.
Is the data sent to the model anonymous?
Strictly speaking it is pseudonymization, the measure the GDPR names in article 32: the model provider only sees placeholders, but the table that leads back to the names exists - it lives in your database and never leaves. That's why the data stays personal, and the DPIA, records and notices stay your job.
Can we install it ourselves?
Yes: public repository, Docker Compose, deployment documentation.
If you need a hand instead, we can offer support for installation, training and customisations - contact us through the form below to request more information.
Can we use it company-wide with several users?
Yes. Every user gets their own account: their own OpenRouter key (generated automatically by BlockingBear from the Management key entered during initial setup) with the spending cap you configure. The administrator manages data categories, rules and costs.
Contact us
Tell us about your case.
If you'd like more information or need support, fill in the form.