Skip to main content

🛡️ Enterprise PII Guardrails Studio

High-Performance, Zero-Leak AI Privacy Gateway & Management Studio for Enterprise LLM Pipelines

PyPI Version Python Version Security Performance Platform


PyPI PackageGitHub RepositoryReport Issue


📸 The Enterprise Studio in Action

Interactive PII Playground (Live Detection with Visual Highlight Pills)

Inspect, scrub, and redact sensitive entities with sub-25ms latency. Visual badge pills pinpoint exactly what the engine detected before it ever leaves your network.

Interactive PII Playground


🔍 Expand to View Additional Studio Screenshots

1. Deterministic Safe Payload Output (/mask)

Transformed prompt ready for LLM consumption with reversible placeholder tokens (<PERSON_1>, <SSN_1>, <CREDIT_CARD_1>).

Safe Payload View

2. Node-Locked Enterprise Licensing & Hardware ID Management

Cryptographically bound to your server hardware using Ed25519 signatures with zero external network phone-home requirement.

License Management

3. 30+ Entity Recognizers & Rule Engine

Granular toggles for Financial, Healthcare, IT Security, and Core PII with configurable replacement strategies (Replace, Mask, Hash, Redact).

Guardrail Profiles

4. Real-Time Threat Intelligence & IoC Shield

Interception firewall blocking malicious IP addresses, phishing domains, and credential leaks before evaluation.

Threat Intelligence

5. Enterprise Authentication Portal

Encrypted session management, role-based access control, and customizable enterprise branding.

Login Screen


⚡ Overview

Enterprise PII Guardrails Studio is an ultra-fast, defense-in-depth privacy gateway designed to intercept, detect, mask, and pseudonymize Personally Identifiable Information (PII) before it reaches third-party LLM APIs (OpenAI, Anthropic, Google Gemini, Azure OpenAI) or internal vector databases.

Key Highlights:

  • Sub-25ms Live Masking: In-memory LRU authorization cache and non-blocking asynchronous audit pipeline.
  • Zero-Leak Guarantee at Rest: Database, API keys, and audit logs are encrypted using SQLCipher AES-256-CBC.
  • SHA-256 Cryptographic Verification: Every downloaded runtime engine is verified on the fly against official SHA-256 hashes prior to execution.
  • Node-Locked Licensing (v4): Commercial licenses are cryptographically locked to the host's Server Hardware ID via Ed25519 asymmetric signatures—operating 100% offline with zero cloud dependency.
  • Bi-Directional Token Restoration: Effortlessly restore LLM responses (/unmask) back to original values for authorized end users.

🚀 Quickstart

Method 1: Using pip (Standard Python)

# 1. Install from PyPI
pip install piiguardrails

# 2. Launch the studio
piiguardrails

On first launch, piiguardrails automatically streams the core binary, verifies its SHA-256 cryptographic checksum, provisions your encrypted database, and opens the studio dashboard on: 👉 http://localhost:8000


Method 2: Using uv (Instant Sandbox — Zero Setup)

Run directly in a self-contained, isolated environment without polluting global Python:

uv run --with piiguardrails piiguardrails

🎁 Community Launch Promo: 6 Months Free Enterprise

To celebrate our v2.0 release, early adopters can unlock full Enterprise Tier features (unlimited API requests, unrestricted payload length, and custom regex policies) through March 31, 2027:

ED3-AMBGXK7UVD777777-GRYXEUYUZ432JOHY-UWVDBHXRLAXU4U47-7MBK2DQGIUV4JQT6-UJNRXNTHI3JPBGIS-P66HGKVYNLMQXHHS-M3N4RF3XDN6LZILT-WQNCGJ4KEY6ONIIM

To activate:

  1. Open the studio dashboard (http://localhost:8000).
  2. Go to Settings > License & Quota in the sidebar.
  3. Paste the key above and click Activate License.

🧩 Python Integration Example

Once the studio is running, integrate it directly into your LangChain, LlamaIndex, or raw API pipeline:

import requests

API_KEY = "your-api-key-here"  # Generated in the Studio UI
headers = {"X-API-Key": API_KEY, "Content-Type": "application/json"}

# 1. Mask sensitive input before sending to LLM
payload = {
    "text": "Hello Alice Smith, your verification code was sent to alice.smith@acme.corp. Call us at 415-555-2671."
}

mask_response = requests.post("http://localhost:8000/mask", json=payload, headers=headers).json()
print("Masked text for LLM:", mask_response["masked_text"])
# Output: "Hello <PERSON_1>, your verification code was sent to <EMAIL_1>. Call us at <PHONE_1>."

# 2. Query your LLM with safe, masked prompt...
# simulated_llm_reply = "We contacted <PERSON_1> at <EMAIL_1> regarding the ticket."

# 3. Unmask the LLM response back to real entities for your user
unmask_payload = {
    "text": "We contacted <PERSON_1> at <EMAIL_1>.",
    "mapping": mask_response["mapping"]
}
unmask_response = requests.post("http://localhost:8000/unmask", json=unmask_payload, headers=headers).json()
print("Restored response:", unmask_response["unmasked_text"])
# Output: "We contacted Alice Smith at alice.smith@acme.corp."

🛡️ Key Capabilities & Architecture

Feature Description
Blazing Fast (<25ms) In-memory LRU authorization caching + asynchronous non-blocking SQLite/SQLCipher audit worker thread.
30+ Entity Recognizers SSN, Credit Cards, IBAN, Passports, Names, Emails, Phone Numbers, IP/MAC addresses, API keys, JWTs, Medical IDs.
AES-256 Storage Built-in SQLCipher encryption ensures all audit logs, API keys, and configurations are hardware-locked and encrypted at rest.
Zero-Footprint Cleanup Automatic boot-time and shutdown sweeps safely purge temporary runtime artifacts to prevent disk bloat across repeated runs.
Modern Management UI Material Design 3 / MUI dashboard for live telemetry, access keys, policy rules, and audit logs.
Deterministic Reverse Tokenizer Flawless restoration (/unmask) of LLM responses back to original values for authorized consumers.

📋 System Requirements

  • Operating System: Windows 10, Windows 11, Windows Server (64-bit) or Linux (Ubuntu, Debian, RHEL, CentOS, Fedora, Rocky, Arch, WSL2 x86_64)
  • Python: >= 3.8 (or uv)
  • Memory: Minimum 2 GB RAM
  • Port: Default 8000 (configurable via .env or --port)

📄 License

This software is distributed under the Enterprise Software License and Evaluation Agreement. All rights reserved.

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

piiguardrails-2.0.5.tar.gz (11.0 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

piiguardrails-2.0.5-py3-none-any.whl (10.7 kB view details)

Uploaded Python 3

File details

Details for the file piiguardrails-2.0.5.tar.gz.

File metadata

  • Download URL: piiguardrails-2.0.5.tar.gz
  • Upload date:
  • Size: 11.0 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/7.0.0 CPython/3.11.12

File hashes

Hashes for piiguardrails-2.0.5.tar.gz
Algorithm Hash digest
SHA256 2f84b2255d9b21c7b91d3a5d0d4c2303301c4576a0b1bb498a1ce3dba98f5390
MD5 84e7eed8995e416e0be75257f67fbc1f
BLAKE2b-256 46ddf013d30e06b3aecdeb6ff7912b0181786b86dba71d0f82bd1fb7c64727a4

See more details on using hashes here.

File details

Details for the file piiguardrails-2.0.5-py3-none-any.whl.

File metadata

  • Download URL: piiguardrails-2.0.5-py3-none-any.whl
  • Upload date:
  • Size: 10.7 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/7.0.0 CPython/3.11.12

File hashes

Hashes for piiguardrails-2.0.5-py3-none-any.whl
Algorithm Hash digest
SHA256 7dbab0f02916dfeee6fcb1c2aacad715f5c1af5494e90e0acbd14e0a8a539707
MD5 ff8f76aae7db254e6e8272360f38130d
BLAKE2b-256 169d0892e3c3207d4b6d49b3396b47a3f44495b14f454c91919c63733ee1850f

See more details on using hashes here.

Release history Release notifications | RSS feed

This release

2.0.5 This release

2 files

2.0.4

2 files

2.0.3

2 files

2.0.2

2 files

2.0.1

2 files

2.0.0

2 files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page