Skip to content
SPECIFICTION
Get listed

PII Firewall

pii-firewall.com

Free plan LinuxSelf-hosted
Visit pii-firewall.com
Spec score 7.2 #18 of 23 in AI Guardrail Software

What it is

PII Firewall is an open-source, self-hosted tool that intercepts personally identifiable information before it reaches an LLM, then restores original values in the response. The maker highlights healthcare, finance, and legal workflows, including clinical language processing, fintech support automation, and legal document review. Built-in profiles cover healthcare, finance, legal, and generic use, with custom profiles also available.

Detection options include regex, Presidio, GLiNER, Transformers, OpenAI Privacy Filter, hybrid setups, and custom backends. Users can choose to keep, pseudonymize, redact, generalize, mask, or hash detected information. The product says it supports 55+ languages with automatic language detection and locale-specific patterns. Integration examples include OpenAI, Anthropic, LangChain, FastAPI, streaming transport, Ollama, LiteLLM, and arbitrary HTTP LLM endpoints. Tenant-scoped token mappings and a forget operation support deleting vault mappings for a thread or case. Each call produces a trace with detected entity types, confidence scores, and replacements. The project uses the Apache 2.0 license and provides a Python package; its regex-only base install does not require ML dependencies. The maker says hash is for analytics workflows and is not used in built-in presets.

Spec sheet

Purpose
Intercepts and anonymizes PII before it reaches an LLM, then restores original values in the response.Read 7 Oct 2026 · pii-firewall.com
Intended users
The maker highlights healthcare, finance, and legal use cases, including clinical NLP, fintech support automation, and legal document review.Read 7 Oct 2026 · github.com
Integrations
Examples cover OpenAI, Anthropic, LangChain, FastAPI, streaming transport, Ollama, LiteLLM, and arbitrary HTTP LLM endpoints.Read 7 Oct 2026 · pii-firewall.com
License
The project is open source under the Apache 2.0 license.Read 7 Oct 2026 · pii-firewall.com
Audit
Each call produces a trace with detected entity types, confidence scores, and applied replacements.Read 7 Oct 2026 · pii-firewall.com
Data controls
The maker describes tenant-scoped token mappings and a forget operation that deletes vault mappings for a thread or case.Read 7 Oct 2026 · pii-firewall.com
Detection
Detection backends include regex, Presidio, GLiNER, Transformers, OpenAI Privacy Filter, hybrid, and custom options.Read 7 Oct 2026 · pii-firewall.com
Domain profiles
Built-in profiles include healthcare, finance, legal, generic, and custom.Read 7 Oct 2026 · pii-firewall.com
Install
The maker provides a Python package install; the base regex-only install has no ML dependencies.Read 7 Oct 2026 · pii-firewall.com
Languages
The product says it supports 55+ languages with automatic language detection and locale-specific patterns.Read 7 Oct 2026 · pii-firewall.com
Notable limit
The maker says the HASH action is for analytics workflows and is not used in built-in presets.Read 7 Oct 2026 · pii-firewall.com
PII handling
Six disposition actions are supported: keep, pseudonymize, redact, generalize, mask, and hash.Read 7 Oct 2026 · pii-firewall.com

Plans and prices

Open source Free Apache 2.0 · Python package · regex-only install needs no ML dependencies Read 7 Oct 2026 · pii-firewall.com

Every PII Firewall plan and price →

Strong points and limits

Strong points

  • Profiles cover healthcare, finance, legal, and custom use.
  • Six actions are available for detected PII.
  • Supports 55+ languages with automatic language detection.
  • Traces include detected types and confidence scores.
  • Regex-only installation needs no ML dependencies.

Limits

  • Self-hosted deployment is required.
  • Python is the listed SDK language.
  • Hash is not used in built-in presets.

Who it suits

PII Firewall suits teams handling sensitive data in healthcare, finance, or legal workflows who want to intercept and transform PII before LLM processing. It is for users prepared to self-host a Python-based tool.

Verdict

PII Firewall provides configurable PII detection and handling before LLM requests, with mappings, deletion controls, and call traces. Its self-hosted deployment and Python package make those implementation requirements worth considering.

Where Specifiction places it

Alternatives to PII FirewallAll alternatives →