AI TrustMark

PII detection / redaction companies, products & suppliers

Finding and redacting personal data in text, files or logs. Jobs: pii classification; redaction apis; scanning of corpora.

What is PII detection / redaction?

Finding and redacting personal data in text, files or logs. Jobs: pii classification; redaction apis; scanning of corpora.

What problems does it solve?

Logs, prompts and training sets still contain untreated personal data.

Typical business use cases

  • PII classification
  • Redaction APIs
  • Scanning of corpora

Important capabilities

  • Entity types
  • Redaction styles
  • APIs

What buyers should evaluate

  • Entity coverage for your locales
  • Over-redaction
  • Where scans run

Risks and governance considerations

A PII service that stores the unredacted original.

Procurement checklist

  • Original retention
  • Entity list
  • Locale

Relevant AI Trustmark assurance

AI Trustmark independent findings appear only when an assessment or certificate exists. Category membership does not imply verification.

Methodology · How verification works

Products and providers

Open a product profile for its catalogue details, or use the provider link for the company profile. Claimed listings appear first, then by name. Payment never changes the order.

  • Amazon Comprehend PII Detection

    By Amazon Web Services

    Amazon Comprehend PII detection is a feature of the Amazon Comprehend NLP service that finds and redacts personally identifiable information in text. It can process customer emails

  • Basis Theory Tokenization Platform

    By Basis Theory

    Basis Theory is a payment vault and tokenisation platform that centralises sensitive card data, governs access and routes tokens to any payment service provider or other endpoint.

  • Gretel Transform

    By Gretel

    Build SDG pipelines to power conversational AI, benchmarks, and agentic AI workflows with NVIDIA NeMo synthetic data tools. Gretel Transform is Gretel's software product, from Gret

  • IBM Guardium Discover and Classify

    By IBM

    IBM Guardium Discover and Classify finds and classifies sensitive structured and unstructured data across on-premises, cloud and mainframe environments. Continuous scanning discove

  • Presidio

    By Microsoft

    Presidio is an open-source toolkit for finding and removing personal data (PII) in text, images and structured data. Its analyzer detects PII using named entity recognition, regula

  • Nightfall DLP

    By Nightfall AI

    See and control sensitive data across AI agents, MCP servers, endpoints, and SaaS — in real time. Legacy tools can't see this, let alone stop it. Nightfall DLP is Nightfall AI

  • Piiano Vault

    By Piiano

    Piiano Vault is Piiano's platform, from Piiano Privacy Solutions Ltd. Published at piiano.com/piiano-vault. Directory filing: PII detection / redaction. Vendor legal name on this p

  • Private AI Platform

    By Private AI

    Turn restricted data into valuable assets. Context-aware de-identification for PII, PHI, and PCI across 52 languages. Deploy in your infrastructure. Private AI Platform is Private

  • Privitar

    By Privitar

    Privitar is a London data-privacy company selling software to de-identify and control the use of sensitive data. Public marketing covers privacy engineering for analytics and AI pi

  • Redactable

    By Redactable

    AI-powered document redaction software that automatically finds and removes sensitive information. Fast, secure, and free to try. Redactable is Redactable's software product, from

  • Skyflow Data Privacy Vault

    By Skyflow

    The runtime AI data control platform for enterprises. Skyflow sanitizes data on ingest, protects it at runtime, and enforces policy so you can ship AI safely. Skyflow Data Privacy

  • Strac SaaS Security Platform

    By Strac

    Strac is the leading Data Loss Prevention (DLP), Data Discovery & DSPM platform — securing SaaS, Cloud, Browser, GenAI with automated remediation. Strac SaaS Security Platform is S

  • Tonic Textual

    By Tonic.ai

    Accelerate development & testing with Tonic.ai. Generate realistic, production-like test data that preserves privacy & compliance in complex environments. Learn more. Tonic Textual

Products

Claimed products appear first. Ranking packs and payment do not change this list.

Also used in this category

These products have a different primary category so they do not compete for the same ranking queries. They are listed here because buyers still encounter them in this job.

Related categories

Relevant procurement and assurance guides

Frequently asked questions

What is PII detection / redaction?

Finding and redacting personal data in text, files or logs. Jobs: pii classification; redaction apis; scanning of corpora.

What should not be listed as PII detection / redaction?

Products whose buyer job is DLP enforcement, identity verification, or PETs. Those belong on their own category page so search queries are not split.

Has AI Trustmark independently assessed every PII detection / redaction supplier?

No. A category listing is descriptive. Independent assessment is shown only on company or product pages that carry Trustmark evidence.

What model or provider changes should a buyer insist on being told about?

Material change usually includes a new model family, new region, new subprocessor, new write-capable tool, or a change that affects logging, privacy or human oversight. Those changes should trigger evidence refresh rather than a silent release.

How should buyers verify where AI customer data is processed?

Ask for the named processing locations, cloud regions and any subprocessors that see prompts, files or outputs. A directory listing is not evidence of residency. Independent assessment records the locations that were in scope on the assessment date.

Does a TrustMark on one product cover the rest of the company?

No. Independent assessment is scoped to the named organisation and, where relevant, the named product. Category pages list suppliers as a topic label. They do not imply that every listed company has been assessed.

What incident-handling evidence is useful for AI suppliers?

Buyers should see how AI-specific failures are detected, contained and notified — including unsafe outputs, data leakage and unauthorised agent actions. An incident policy that never mentions models, prompts or tools is incomplete for this class of product.

What security testing evidence should buyers request for an AI product?

Ask what was tested, against which version, whether prompt-injection, data-exfiltration and tenant isolation were in scope, and where failed prompts were stored. A generic ISO certificate or a vendor scanner screenshot is not by itself an AI TrustMark assessment.