PII detection / redaction companies, products & suppliers
Finding and redacting personal data in text, files or logs. Jobs: pii classification; redaction apis; scanning of corpora.
What is PII detection / redaction?
Finding and redacting personal data in text, files or logs. Jobs: pii classification; redaction apis; scanning of corpora.
What problems does it solve?
Logs, prompts and training sets still contain untreated personal data.
Typical business use cases
- PII classification
- Redaction APIs
- Scanning of corpora
Important capabilities
- Entity types
- Redaction styles
- APIs
What buyers should evaluate
- Entity coverage for your locales
- Over-redaction
- Where scans run
Risks and governance considerations
A PII service that stores the unredacted original.
Procurement checklist
- Original retention
- Entity list
- Locale
Relevant AI Trustmark assurance
AI Trustmark independent findings appear only when an assessment or certificate exists. Category membership does not imply verification.
Companies and providers
Claimed suppliers appear first so buyers can start with listings the company has taken ownership of. Payment does not buy this order.
Amazon Web Services is Amazon's cloud division selling compute, storage, Bedrock model hosting and related AI infrastructure. Public pages cover regional cloud services for builder
More than a token vault—Basis Theory routes, tokenizes, and optimizes your payments to drive conversion, resilience, and retention. Basis Theory publishes Basis Theory Tokenization
Build SDG pipelines to power conversational AI, benchmarks, and agentic AI workflows with NVIDIA NeMo synthetic data tools. Gretel publishes Gretel Transform as named AI products.
International Business Machines Corporation sells hybrid-cloud software, Granite models and enterprise AI tooling. Public pages distinguish IBM software and models from IBM Consult
Microsoft Corporation sells Windows, Azure, Microsoft 365 and Copilot AI products. Public pages cover cloud, productivity and developer APIs used by enterprises and consumers. Micr
See and control sensitive data across AI agents, MCP servers, endpoints, and SaaS — in real time. Legacy tools can't see this, let alone stop it. Nightfall AI publishes Nightfall D
Piiano publishes Piiano Vault as named AI products. Piiano is used for PII detection / redaction work. Piiano is recorded in Israel. Piiano publishes product information at piiano.
Turn restricted data into valuable assets. Context-aware de-identification for PII, PHI, and PCI across 52 languages. Private AI publishes Private AI Platform as named AI products.
Privitar is a London data-privacy company selling software to de-identify and control the use of sensitive data. Public marketing covers privacy engineering for analytics and AI pi
AI-powered document redaction software that automatically finds and removes sensitive information. Redactable is used for PII detection / redaction work. Redactable is recorded in
Skyflow sanitizes data on ingest, protects it at runtime, and enforces policy so you can ship AI safely. Skyflow publishes Skyflow Data Privacy Vault as named AI products. Skyflow
Strac is the leading Data Loss Prevention (DLP), Data Discovery & DSPM platform — securing SaaS, Cloud, Browser, GenAI with automated remediation. Strac publishes Strac SaaS Securi
Tonic.ai publishes Tonic Textual, Tonic Fabricate, and Tonic Structural as named AI products. Tonic.ai is used for Privacy-enhancing AI and PII detection / redaction work. Tonic.ai
Products
Claimed products appear first. Ranking packs and payment do not change this list.
- Amazon Comprehend PII Detection· Amazon Web Services
- Basis Theory Tokenization Platform· Basis Theory
- IBM Guardium Discover and Classify· IBM
- Microsoft Presidio· Microsoft
- Piiano Vault· Piiano
- Private AI Platform· Private AI
- Redactable· Redactable
- Skyflow Data Privacy Vault· Skyflow
- Strac SaaS Security Platform· Strac
- Tonic Textual· Tonic.ai
Also used in this category
These products have a different primary category so they do not compete for the same ranking queries. They are listed here because buyers still encounter them in this job.
- Gretel Transform· Gretel
- Nightfall DLP· Nightfall AI
- Privitar· Privitar
Related categories
Relevant procurement and assurance guides
Frequently asked questions
What is PII detection / redaction?
Finding and redacting personal data in text, files or logs. Jobs: pii classification; redaction apis; scanning of corpora.
What should not be listed as PII detection / redaction?
Products whose buyer job is DLP enforcement, identity verification, or PETs. Those belong on their own category page so search queries are not split.
Has AI Trustmark independently assessed every PII detection / redaction supplier?
No. A category listing is descriptive. Independent assessment is shown only on company or product pages that carry Trustmark evidence.
What model or provider changes should a buyer insist on being told about?
Material change usually includes a new model family, new region, new subprocessor, new write-capable tool, or a change that affects logging, privacy or human oversight. Those changes should trigger evidence refresh rather than a silent release.
How should buyers verify where AI customer data is processed?
Ask for the named processing locations, cloud regions and any subprocessors that see prompts, files or outputs. A directory listing is not evidence of residency. Independent assessment records the locations that were in scope on the assessment date.
Does a TrustMark on one product cover the rest of the company?
No. Independent assessment is scoped to the named organisation and, where relevant, the named product. Category pages list suppliers as a topic label. They do not imply that every listed company has been assessed.
What incident-handling evidence is useful for AI suppliers?
Buyers should see how AI-specific failures are detected, contained and notified — including unsafe outputs, data leakage and unauthorised agent actions. An incident policy that never mentions models, prompts or tools is incomplete for this class of product.
What security testing evidence should buyers request for an AI product?
Ask what was tested, against which version, whether prompt-injection, data-exfiltration and tenant isolation were in scope, and where failed prompts were stored. A generic ISO certificate or a vendor scanner screenshot is not by itself an AI TrustMark assessment.