Local redaction · Cloud analysis

Analyze the whole file.
Send none of the client.

WordZilla runs an AI model on your computer to find every name, address, email, phone number and account number in your documents, and replaces them with stable coded tokens. Only the redacted copy is ever sent for analysis — and the real names come back on your machine alone.

No account or API key to start 72-hour demo Windows 10 / 11

One run, start to finish.

From an empty install to a finished analysis — the four moments that matter.

WordZilla — Super Easy Mode
Local
Setting up your private AI
One download, once. After this, detection never touches the network.
gemma-4-e4b-it-qat
Runs entirely on this computer · 4.22 GB
Downloading model… 0%
Private AI ready
Loaded on your GPU No account No API key
Finding what identifies people
Every document is read locally. Identifying details become stable coded tokens.
Opinion Report.pdf
Engagement Letter.docx
Site Inspection.pdf
Email thread.msg
Cost Schedule.xlsx
0 identities found

Opinion Report.pdf

On 14 March 2024, Sarah Loveridge of Harbor Point Properties LLC wrote to counsel for Dalton & Reyes regarding the property at 1420 Ashcroft Avenue, Suite 300, Fullerton, CA 92833, confirming that the parcel identified as TMK No. (1) 9-6-008-007 had passed inspection. Correspondence should be directed to s.loveridge@harborpointllc.example or (808) 555-0142 during the review period.

Reading your documents… 0:03
Redaction complete. 5 documents · 63 identities · 1,284 replacements.
Choose what you want out of it
Seven built-in tasks, every one editable — plus a blank page of your own.
Start Cloud Analysis
Cancel
Nothing is sent until you click Start.
The analysis comes back
A frontier model reasons over the redacted corpus. Your keypair puts the names back — locally.
Sending the redacted corpus…
Left this computer
  • 0 names
  • 0 addresses
  • 0 emails or phone numbers
  • 0 account or parcel numbers
Unredacted copy written The same analysis with the real names restored — produced on this computer from your keypair, never uploaded.
An illustration of the workflow, drawn to match the app. Sample text is fictional.
How it works

Point it at a folder. That's the whole setup.

No pipeline to configure, no model to install by hand, no cloud account needed to redact.

01

Pick your documents

PDFs (scanned ones are OCR'd), Word, Excel, PowerPoint, email, plain text. WordZilla creates its work folder next to them and leaves your originals untouched.

02

Local AI redacts

A model running on your own machine reads every document and replaces identifying details with coded tokens like «PER_0001». The same person gets the same token in every file.

03

Review before anything leaves

You see the redacted corpus and can add anything the model missed, then re-run. Nothing is sent anywhere until you explicitly click Start.

04

Analyze the redacted copy

Send it to Claude or GPT with your own API key — or keep it entirely offline and analyze with the local model instead.

05

Get both versions back

The redacted analysis, plus a copy with the real names restored from your keypair. The restoration happens on your computer.

06

Or just ask questions

Chat with Docs answers questions about your files with the local model, citing its sources — click a citation and the original document opens on the exact page, highlighted.

Where your data goes

The whole point is the line between these two columns.

Redaction is local because it has to see the sensitive material. Analysis is remote because that's where the reasoning is. Only redacted text crosses over.

Stays on your computer

Everything sensitive

  • Your original documents
  • The AI model that reads them, and every word it processes
  • The keypair mapping tokens back to real names
  • The unredacted analysis, restored locally
  • Every Chat with Docs question and answer
Sent for analysis — only if you ask

The redacted copy, and nothing else

  • Text in which identities are already coded tokens
  • The task prompt you reviewed and can edit
  • Sent under your API key, direct to the provider — we don't proxy it or see it
  • Skip it entirely and analyze locally if you prefer
Said plainly: automated redaction is not perfect.

No detector catches everything, and WordZilla is built on the assumption that it will miss things. That's why it shows you the redacted corpus before anything is sent, lets you add what it missed and re-run, and re-scans its own output for surviving details. You remain responsible for verifying the redacted text before you share it. The app says the same thing at the point where it matters.

The demo

The full guided app, for 72 hours.

Not a stripped trial: it redacts real documents, runs real analyses, and produces real output you keep.

72 hoursFrom first launch. $9.99/month after, if you want to keep it.
Windows 10/11Signed installer. macOS and Linux aren't ready yet.
~4.2 GBOne-time model download on first run. Nothing else to install.
Your own keyFor cloud analysis only — none is bundled, and it's optional.

What's included

Both guided modes: Super Easy Mode (pick a folder, get redacted documents and a cloud analysis) and Chat with Docs (ask questions about your files locally, with clickable citations into the source pages). Redaction, review, re-run, local or cloud analysis, and automatic unredaction of the results.

What to expect

A GPU makes this pleasant; on CPU alone a large corpus can take hours, and the app tells you so up front with a time estimate before you commit. The demo runs one specific local model so behaviour is predictable. Your redacted output and keypair stay yours when the demo ends.

Questions worth asking

Are my documents uploaded anywhere?

No. Ingestion, OCR, PII detection and redaction all run on your machine, using a model that also runs on your machine. The only thing that can ever leave is the redacted corpus, only when you click Start Cloud Analysis, and only to the provider whose API key you entered. You can skip that step entirely and analyze locally.

Do I need an API key or an account?

Not to redact — that's the whole local half of the app, and it needs neither. A key from Anthropic or OpenAI is only needed if you want a frontier model to do the analysis. The demo ships with no key of ours; you use your own, and the request goes straight from your machine to the provider.

How good is the redaction, honestly?

Good enough that reviewing it is a review, not a rewrite — but not perfect, and we don't claim it is. It reads every document with a language model rather than pattern-matching, handles the same person appearing as "Sarah Loveridge", "Ms. Loveridge" and "S. Loveridge", survives OCR damage and line wrapping, then re-scans its own output for anything that got through. Then it shows you the result and asks you to check it. Verifying before you share is your call and your responsibility.

Can I get the real names back?

Yes — that's the point of coded tokens rather than black boxes. Your work folder holds a keypair that maps every token to its original value, and the app automatically produces an unredacted copy of any analysis alongside the redacted one. That restoration happens on your computer; the keypair never leaves it.

What hardware do I need?

Any modern Windows PC will run it. A GPU (AMD, NVIDIA or Intel — it ships a Vulkan build) makes it dramatically faster; without one it falls back to CPU, which works but can take hours on a large corpus. The app estimates the run time before you start and warns you when an overnight run is on the cards.

What happens when the 72 hours are up?

The app stops and offers a $9.99/month subscription or a code. Everything it already produced — your redacted documents, keypair and analyses — is yours and stays on your disk.

Mac or Linux?

Not yet. The codebase runs on Linux, but the packaged, signed demo is Windows-only for now. Join the list and say which you'd want — that's how we'll decide what comes next.