cs.AIAug 18, 2026

Redakto - The Incognito Tab for LLMs

Authors: Saurav Kumar Saha, Tom Röhr, Felix Bießmann

Organizations: Berlin University of Applied Sciences, Luxemburger Str. 10, 13353 Berlin, Germany · Einstein Center Digital Future, Wilhelmstraße 67, 10117 Berlin, Germany

Abstract

Large Language Models (LLMs) are being increasingly used in everyday applications. A major challenge in the context of LLMs or Artificial Intelligence (AI) in general is to ensure privacy when using them, meaning that personally identifiable information (PII) is removed from any text that enters an LLM. These challenges have become more urgent with novel EU legislation. Uncertainty around LLM usage with respect to privacy concerns in EU countries can be a major blocker for the speed of innovation and transfer from research to applications. Here we present Redakto, a tool that can be used for anonymizing text prior to feeding it to an LLM or other downstream text processing. We provide state-of-the-art functionalities for both redaction of PII but also when used for pseudonymization. These functionalities are exposed such that they can easily be used by end-users, through the Redakto web application, and by developers and researchers, via REST APIs and model context protocol (MCP) hooks. The implementation is fully open source, requires modest compute resources, and can be readily deployed on local hardware. In contrast to prior work and in order to better assess the quality of the anonymized texts, we conduct extensive empirical evaluations on textual data from legal and medical domain with respect to both privacy and utility of the redacted texts. Our empirical results demonstrate that the texts anonymized with different redaction strategies achieve utility scores on par with the original texts, suggesting that anonymization with Redakto can be used for LLM tasks without substantial negative impact for the tasks we explored.

Figures & tables

Appendix figures & tables4 assets

Supplementary material from the paper’s appendix.

Appendix

Explore similar work

CardsList
  1. Anonymous-by-Construction: An LLM-Driven Framework for Privacy-Preserving Text

    Mar 17, 2026Federico Albanese, Pablo Ronco, Nicolás D'IppolitoPrivacy-Preserving MLPrivacy-Preserving Language Models

  2. LLM Anonymization Against Agentic Re-Identification

    May 29, 2026Ziwen Li, Jianing Wen, Tianshi LiPrivacy-Preserving Language ModelsPrivacy-Utility Tradeoff

  3. Veil-Then-Reveal: Protecting PII Privacy via Reversible Pseudo-Anonymization in Zero-Trust User--LLM Interaction

    Oct 16, 2026Mohamed Shaaban, Mohamed Elmahallawy, Thomas E. CarrollPrivacy-Preserving Language Models