🛡️ Enterprise PII Guardrails Studio
High-Performance, Zero-Leak AI Privacy Gateway & Management Studio for Enterprise LLM Pipelines
📸 The Enterprise Studio in Action
Interactive PII Playground (Live Detection with Visual Highlight Pills)
Inspect, scrub, and redact sensitive entities with sub-25ms latency. Visual badge pills pinpoint exactly what the engine detected before it ever leaves your network.
🔍 Expand to View Additional Studio Screenshots
1. Deterministic Safe Payload Output (/mask)
Transformed prompt ready for LLM consumption with reversible placeholder tokens (<PERSON_1>, <SSN_1>, <CREDIT_CARD_1>).
2. Node-Locked Enterprise Licensing & Hardware ID Management
Cryptographically bound to your server hardware using Ed25519 signatures with zero external network phone-home requirement.
3. 30+ Entity Recognizers & Rule Engine
Granular toggles for Financial, Healthcare, IT Security, and Core PII with configurable replacement strategies (Replace, Mask, Hash, Redact).
4. Real-Time Threat Intelligence & IoC Shield
Interception firewall blocking malicious IP addresses, phishing domains, and credential leaks before evaluation.
5. Enterprise Authentication Portal
Encrypted session management, role-based access control, and customizable enterprise branding.
⚡ Overview
Enterprise PII Guardrails Studio is an ultra-fast, defense-in-depth privacy gateway designed to intercept, detect, mask, and pseudonymize Personally Identifiable Information (PII) before it reaches third-party LLM APIs (OpenAI, Anthropic, Google Gemini, Azure OpenAI) or internal vector databases.
Key Highlights:
- Sub-25ms Live Masking: In-memory LRU authorization cache and non-blocking asynchronous audit pipeline.
- Zero-Leak Guarantee at Rest: Database, API keys, and audit logs are encrypted using SQLCipher AES-256-CBC.
- SHA-256 Cryptographic Verification: Every downloaded runtime engine is verified on the fly against official SHA-256 hashes prior to execution.
- Node-Locked Licensing (v4): Commercial licenses are cryptographically locked to the host's Server Hardware ID via Ed25519 asymmetric signatures—operating 100% offline with zero cloud dependency.
- Bi-Directional Token Restoration: Effortlessly restore LLM responses (
/unmask) back to original values for authorized end users.
🚀 Quickstart
Method 1: Using pip (Standard Python)
# 1. Install from PyPI
pip install piiguardrails
# 2. Launch the studio
piiguardrails
On first launch, piiguardrails automatically streams the core binary, verifies its SHA-256 cryptographic checksum, provisions your encrypted database, and opens the studio dashboard on:
👉 http://localhost:8000
Method 2: Using uv (Instant Sandbox — Zero Setup)
Run directly in a self-contained, isolated environment without polluting global Python:
uv run --with piiguardrails piiguardrails
🎁 Community Launch Promo: 6 Months Free Enterprise
To celebrate our v2.0 release, early adopters can unlock full Enterprise Tier features (unlimited API requests, unrestricted payload length, and custom regex policies) through March 31, 2027:
ED3-AMBGXK7UVD777777-GRYXEUYUZ432JOHY-UWVDBHXRLAXU4U47-7MBK2DQGIUV4JQT6-UJNRXNTHI3JPBGIS-P66HGKVYNLMQXHHS-M3N4RF3XDN6LZILT-WQNCGJ4KEY6ONIIM
To activate:
- Open the studio dashboard (
http://localhost:8000). - Go to Settings > License & Quota in the sidebar.
- Paste the key above and click Activate License.
🧩 Python Integration Example
Once the studio is running, integrate it directly into your LangChain, LlamaIndex, or raw API pipeline:
import requests
API_KEY = "your-api-key-here" # Generated in the Studio UI
headers = {"X-API-Key": API_KEY, "Content-Type": "application/json"}
# 1. Mask sensitive input before sending to LLM
payload = {
"text": "Hello Alice Smith, your verification code was sent to alice.smith@acme.corp. Call us at 415-555-2671."
}
mask_response = requests.post("http://localhost:8000/mask", json=payload, headers=headers).json()
print("Masked text for LLM:", mask_response["masked_text"])
# Output: "Hello <PERSON_1>, your verification code was sent to <EMAIL_1>. Call us at <PHONE_1>."
# 2. Query your LLM with safe, masked prompt...
# simulated_llm_reply = "We contacted <PERSON_1> at <EMAIL_1> regarding the ticket."
# 3. Unmask the LLM response back to real entities for your user
unmask_payload = {
"text": "We contacted <PERSON_1> at <EMAIL_1>.",
"mapping": mask_response["mapping"]
}
unmask_response = requests.post("http://localhost:8000/unmask", json=unmask_payload, headers=headers).json()
print("Restored response:", unmask_response["unmasked_text"])
# Output: "We contacted Alice Smith at alice.smith@acme.corp."
🛡️ Key Capabilities & Architecture
| Feature | Description |
|---|---|
| Blazing Fast (<25ms) | In-memory LRU authorization caching + asynchronous non-blocking SQLite/SQLCipher audit worker thread. |
| 30+ Entity Recognizers | SSN, Credit Cards, IBAN, Passports, Names, Emails, Phone Numbers, IP/MAC addresses, API keys, JWTs, Medical IDs. |
| AES-256 Storage | Built-in SQLCipher encryption ensures all audit logs, API keys, and configurations are hardware-locked and encrypted at rest. |
| Zero-Footprint Cleanup | Automatic boot-time and shutdown sweeps safely purge temporary runtime artifacts to prevent disk bloat across repeated runs. |
| Modern Management UI | Material Design 3 / MUI dashboard for live telemetry, access keys, policy rules, and audit logs. |
| Deterministic Reverse Tokenizer | Flawless restoration (/unmask) of LLM responses back to original values for authorized consumers. |
📋 System Requirements
- Operating System: Windows 10, Windows 11, Windows Server (64-bit) or Linux (Ubuntu, Debian, RHEL, CentOS, Fedora, Rocky, Arch, WSL2 x86_64)
- Python:
>= 3.8(oruv) - Memory: Minimum 2 GB RAM
- Port: Default
8000(configurable via.envor--port)
📄 License
This software is distributed under the Enterprise Software License and Evaluation Agreement. All rights reserved.
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file piiguardrails-2.0.5.tar.gz.
File metadata
- Download URL: piiguardrails-2.0.5.tar.gz
- Upload date:
- Size: 11.0 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/7.0.0 CPython/3.11.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
2f84b2255d9b21c7b91d3a5d0d4c2303301c4576a0b1bb498a1ce3dba98f5390
|
|
| MD5 |
84e7eed8995e416e0be75257f67fbc1f
|
|
| BLAKE2b-256 |
46ddf013d30e06b3aecdeb6ff7912b0181786b86dba71d0f82bd1fb7c64727a4
|
File details
Details for the file piiguardrails-2.0.5-py3-none-any.whl.
File metadata
- Download URL: piiguardrails-2.0.5-py3-none-any.whl
- Upload date:
- Size: 10.7 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? No
- Uploaded via:
twine/7.0.0 CPython/3.11.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
7dbab0f02916dfeee6fcb1c2aacad715f5c1af5494e90e0acbd14e0a8a539707
|
|
| MD5 |
ff8f76aae7db254e6e8272360f38130d
|
|
| BLAKE2b-256 |
169d0892e3c3207d4b6d49b3396b47a3f44495b14f454c91919c63733ee1850f
|