Anonymize and classify sensitive documents. Zero data stored, ever.
Built for Swiss courts. Now protecting every sensitive document. Fine-tuned local AI on a single 24 GB GPU. In-memory only. DOCX and native PDF. Word and PDF in, Word and PDF out.
Upload a Word or PDF document. Get it back anonymized. Nothing stored.
The entire pipeline runs in volatile memory. When the response is sent, the data ceases to exist.
1. Hans Müller, represented by Dr. Sarah Weber, Attorney at Law, Zurich.
versus
2. Innovatech GmbH, represented by RA Thomas Keller.
(Regarding: Employment Contract Dispute, Bahnhofstrasse 42, 8001 Zürich)
The court, composed of Judge Meier (President), Judge Fischer, and Judge Schmid, has decided:
Classify entities in any sensitive document. Five protection categories.
Not just courts. Shield classifies entities in contracts, compliance reports, HR files, and financial documents. DOCX and native PDF. Category-based protection with structured placeholders or full redaction.
The agreement between Maria Schneider (CEO, Helvetia Treuhand AG)
and Credit Suisse, account CH93 0076 2011 6238 5295 7
(Dated: 15 March 2024, Value: CHF 2.4M)
Five categories. Each with a legal basis.
Shield classifies every detected entity into one of five protection categories, each mapped to specific Swiss and international legal frameworks.
PII Standard
DSG / FADPStandard personal identifiers: names, addresses, dates of birth, phone numbers, email addresses.
Names, addresses, DOB, phone, email
Sensitive PII
DSG Art. 5 lit. cSpecially protected data requiring heightened safeguards: health records, religious beliefs, biometric data, AHV numbers.
Health, religion, biometrics, AHV
Client ID (CID)
Art. 47 BankG / Art. 69 FINIGBanking and financial client identifiers protected under Swiss banking secrecy and financial market law.
Client names, IBAN, account numbers, transactions
Own Secrets
Art. 162 StGBYour organization's own trade secrets and proprietary information protected under Swiss criminal law.
Financials, pricing, IP, strategy
Third-Party Secrets
Contractual / NDA; Art. 162/273 StGB; UWGSecrets of third parties protected by non-disclosure agreements, Swiss criminal law, and unfair competition law.
NDA-covered data, counterparty info, entrusted secrets
Knows what to hide. Knows what to keep.
Shield understands Swiss legal context. It distinguishes court officials from parties, preserves PLZ codes while anonymizing street addresses, and keeps legal entity suffixes intact. Every decision is transparent and reviewable.
In Document Classification Mode, protection is category-based rather than role-based.
Structured placeholders or full redaction. Your choice.
Two output modes for different use cases. Placeholders preserve document structure for internal review. Redaction produces publication-ready documents.
Entities replaced with typed, numbered tokens. Preserves document readability and entity relationships. Ideal for internal review, legal proceedings, and cross-referencing.
The agreement between [PERSON_1] (CEO, [COMPANY_1])
and [BANK_1], account [ACCOUNT_1],
dated [DATE_1], regarding [AMOUNT_1]...
Internal review, legal proceedings, audit trails
Entities replaced with solid blocks. No residual information. Ideal for external publication, FOI responses, and regulatory submissions.
The agreement between ██████████ (CEO, ██████████████)
and ██████████, account ████████████████,
dated ██████████, regarding ██████████...
External publication, FOI, regulatory submissions
Metadata flags for downstream workflows.
Tag documents with processing directives that carry through your entire pipeline.
Legal Hold
Document must not be deleted or altered. Preservation obligation in effect.
Art. 271 StGB
Document must not leave Switzerland. Swiss Blocking Statute applies.
Not Relevant
Not relevant to current proceedings. Excluded from further processing.
Flags are metadata tags for downstream workflows. They do not alter document content.
DOCX and PDF in. DOCX and PDF out. No friction.
Upload a .docx or native PDF, get it back with all formatting, styles, headers, footers, tables, and numbering preserved. Same format in, same format out.
DOCX & PDF Fidelity
OOXML-level operations for Word documents, native text-layer processing for PDFs. Tables, headers, footers, styles, numbering. Everything survives anonymization intact.
Sub-Minute Processing
A 30-page court ruling processed in under a minute. What takes a court clerk 2-3 hours of manual redaction takes Shield seconds.
Swiss Court Standard
A.____, B.____, C.____ format with document-order assignment. The same standard used in published BGE decisions. Not generic [REDACTED] tags.
Side-by-Side Comparison
Synchronized scrolling between original and anonymized documents. See exactly what changed and why, in context.
Entity Search & Filter
Search, filter, and sort detected entities by type, category, or confidence. Navigate directly to each occurrence in the document.
Confidence Scores
Every entity detection includes a confidence score with reasoning. Review borderline cases first. Override any decision with one click.
Zero persistence. Not “minimal.” Zero.
Shield has no database. Not an empty one, literally none. No document text appears in logs, and server memory is cleared the moment processing completes. Results live only in your browser session. Refresh the page, and they’re gone.
There is nothing to breach, nothing to subpoena, nothing to audit. The strongest privacy guarantee isn’t encryption. It’s the absence of data entirely.
Local-first. Your infrastructure. Your models.
Shield is built to run on your own infrastructure with fine-tuned local AI models. The entire pipeline runs on a single 24 GB GPU. No external API calls. No data leaving your perimeter. A managed secure cloud option is available for organizations that prefer hosted infrastructure in Switzerland.
Air-Gapped + Local Models
Zero network access
On-Premises
Your infrastructure
Managed Secure Cloud
Hosted in Switzerland
Beyond publication. An inference firewall.
Shield isn't just for court anonymization. Pair it with Sphere to pre-anonymize documents before AI processing. The LLM never touches real data. After inference, re-identify selectively, or keep working on the anonymized version.
Document upload
Upload any document to the pipeline. DOCX, PDF, or plain text.
Shield anonymizes
All PII, names, dates, and entities are replaced with safe tokens before inference.
Sphere processes
AI editing, research, playbooks, and clause analysis. On anonymized content only.
Re-identification
Optionally map all tokens back to original entities. Or continue working on the anonymized document.
Zero exposure. Full capability.
The LLM never sees real names, dates, addresses, or entities. Professional secrecy is enforced by architecture, not policy. Every token is mapped, every entity restored.
Private Cloud + Private Cloud
Both Sphere and Shield run on DocIQ-managed infrastructure in Switzerland. Data never leaves CH/EU jurisdiction.
On-Premise + On-Premise
Full stack on your own infrastructure. Air-gapped option available. Zero external dependencies.
Hybrid
Shield on-premise for anonymization, Sphere in managed cloud for AI processing. Sensitive data never leaves your perimeter.
Swiss Courts
Anonymize rulings for publication in seconds. Standard A.____, B.____ format. Zero data persistence. Nothing to breach.
Government Agencies
FADP-compliant document processing for public records requests, regulatory publications, and inter-agency sharing.
Law Firms
Anonymize case files before sharing with external counsel, opposing parties, or academic researchers.
Banks & Financial Services
Classify and redact client identifiers under Art. 47 BankG. Protect account data, transaction records, and client correspondence.
Insurance
Anonymize claims files, medical reports, and policyholder data for internal review, reinsurance submissions, and regulatory filings.
Healthcare & Pharma
Protect patient data in clinical records, trial documentation, and regulatory submissions. DSG Art. 5 lit. c compliant.
Live at Swiss courts
Shield v1 is deployed at cantonal courts in Switzerland, anonymizing rulings for public publication. Fine-tuned on Swiss legal context, tested against real judicial workflows.
Cantonal Courts
Production since 2025
Frequently Asked Questions
Privacy is not a feature. It’s the architecture.
Court anonymization and document classification. Deploy on your infrastructure. Zero data stored. Fine-tuned local models included.
or register for launch notification
One email when Shield launches. No spam.