25+ PII Types
Names, emails, SSNs, credit cards, addresses, credentials, passports, driver’s licenses, organizations, and more — detected via hybrid AI + regex.
The one API call before every LLM call
Sub-100ms local inference
Self-hosted by default
Intercept sensitive data before it ever reaches an LLM.
One self-hosted API call. Sub-100ms. No data leaves your servers. BlackShield sits in the hot path before any model call and also protects logs, exports, and broader data pipelines.
How it works
One API call before every model call.
Put BlackShield between your app and any model endpoint. One request in, sanitized output out.
// before any LLM call const clean = await fetch('http://localhost:3000/v1/detect', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ text: userMessage }) }); const { sanitized } = await clean.json(); // send sanitized to your LLM
Smart Detection
Paste anything — prose, tables, CSVs, mixed content. BlackShield auto-detects regions and applies the right strategy.
Custom Patterns
Got internal IDs like EMP-12345 or STU-847291? Give 2 examples and BlackShield infers the pattern. No regex required.
25+ supported PII and sensitive entity detectors
- Person Names
- Email Addresses
- Phone Numbers
- US Social Security Numbers
- Credit Card Numbers
- Bank Account Numbers
- Routing Numbers
- IBAN
- Passport Numbers
- Driver’s License Numbers
- Street Addresses
- Zip / Postal Codes
- Dates of Birth
- IP Addresses
- MAC Addresses
- API Keys
- JWT Tokens
- Access Tokens
- Passwords
- Session IDs
- Company / Organization Names
- Medical Record Numbers
- Tax IDs
- Employee IDs
- Student IDs
- Custom Internal IDs
Built for developers
Use the interactive demo to learn the tool before you buy.
The built-in demo at /demo is a sales tool and a safe playground for production-like payloads.
- Paste real-world content (emails, exports, logs, mixed data)
- Toggle 25 detection types on/off to see exactly what fires
- Test custom patterns with your own ID formats
- Copy ready-to-use API snippets in cURL, Python, or Node.js
Why self-hosted matters
Your data stays yours.
BlackShield is purpose-built for teams who cannot let sensitive data leave their own infrastructure.
| Cloud PII Services | BlackShield |
|---|---|
| Your data hits their servers | Data never leaves your infrastructure |
| Per-request pricing | One-time $99 purchase, unlimited requests |
| 200–500ms cloud round-trips | 30–80ms local inference |
| Generic detection | Custom patterns for your internal IDs |
| No table awareness | Auto-detects CSV, TSV, markdown tables |
Pricing
$99 — One-time purchase
Start protecting LLM prompts and sensitive pipelines immediately with a Docker-native deployment.
Docker-native install
docker run --rm -p 3000:3000 blackshield/api:latest- Docker image, runs anywhere
- 3 machine license (dev, staging, prod)
- All 25+ PII detectors included
- Custom pattern support
- Interactive demo built in
- No per-request fees, no subscriptions
The one API call before every LLM call.
Protect private data in prompts, logs, exports, and any sensitive pipeline with local redaction before data egress.