Cypherz.
Start free

Free tool · no signup

See what an AI would actually receive from your prompt.

Paste any text below — invoices, emails, support tickets, contracts — and see every piece of personal data that would leak to OpenAI, Claude, or any AI provider. Detection runs entirely in your browser; nothing is sent to Cypherz.

Your input

Runs entirely in your browser. Nothing is sent to Cypherz.

What an AI provider would see

Hi <NAME_c66154222c2d>,

Please ship the contract to Sasha Petrov at <EMAIL_952f3b017164>
or call <PHONE_950d08e73f8c>. Their office is at <ADDR_0b11bc52c712>,
San Francisco, CA <ZIP_31dced93ec89>. Wire transfer of <AMT_25af5143a85d> USD scheduled to
IBAN <IBAN_fe51427cc25e> by <PHONE_1e68f478a692>.

Card on file: <CC_5c9ec757724a>. SSN <SSN_5d83c356e200>.
Server at <IP_66b31d6833eb> (IPv6 <IP6_344999b88d6a>:0370:7334)
serves <URL_3b2bea5ab18d>

Cheers,
<NAME_c66154222c2d> van der <ORG_d6bcc13b92bb>.

Drop-in replacement: @cypherz/sdk/openai makes this automatic for every request.

14 sensitive values found

Across 13 categories

Phone numbers×2URLs×1IPv6×1Emails×1Companies×1IBANs×1Credit cards×1Addresses×1US SSNs×1IPv4×1Money×1Names×1Postal codes×1
Show the token map (14 entries)
Real valueTypeToken
https://helixbio.com/contracts/sasha.URLs<URL_3b2bea5ab18d>
2001:0db8:85a3:0000:0000:8a2eIPv6<IP6_344999b88d6a>
sasha.petrov@helixbio.comEmails<EMAIL_952f3b017164>
Velde Northbound CRM LtdCompanies<ORG_d6bcc13b92bb>
DE89370400440532013000IBANs<IBAN_fe51427cc25e>
4111 1111 1111 1111Credit cards<CC_5c9ec757724a>
1521 Mission StreetAddresses<ADDR_0b11bc52c712>
+1 (415) 555 0142Phone numbers<PHONE_950d08e73f8c>
555-12-1234US SSNs<SSN_5d83c356e200>
10.20.30.40IPv4<IP_66b31d6833eb>
2026-06-01Phone numbers<PHONE_1e68f478a692>
$42,500Money<AMT_25af5143a85d>
MarcusNames<NAME_c66154222c2d>
94103Postal codes<ZIP_31dced93ec89>

Want this on every AI request your app makes?

Cypherz runs the same detection plus encrypted vault storage, deterministic tokens, and an audit log — drop in `@cypherz/sdk/openai` and your existing code keeps working. Free tier: 50,000 requests/month.

Sign up freeSee the OpenAI drop-in →
Show the restored version (what your app receives back)
Hi Marcus,

Please ship the contract to Sasha Petrov at sasha.petrov@helixbio.com
or call +1 (415) 555 0142. Their office is at 1521 Mission Street,
San Francisco, CA 94103. Wire transfer of $42,500 USD scheduled to
IBAN DE89370400440532013000 by 2026-06-01.

Card on file: 4111 1111 1111 1111. SSN 555-12-1234.
Server at 10.20.30.40 (IPv6 2001:0db8:85a3:0000:0000:8a2e:0370:7334)
serves https://helixbio.com/contracts/sasha.

Cheers,
Marcus van der Velde
Northbound CRM Ltd.

In production, Cypherz handles this step transparently on the response from your AI provider.

Common questions

Frequently asked.

Does this tool send my text anywhere?

No. Detection runs entirely in your browser using JavaScript. The text never leaves the page. You can verify this with your browser's network tab — there are no requests to Cypherz or anyone else from this page.

What detectors are running?

Emails, phone numbers, credit cards (with Luhn validation), SSNs, IBANs, IPv4, IPv6, street addresses, postal codes, URLs, money amounts, company names (with corporate suffixes), person names (title and salutation context), and dates. Same logic as the production Cypherz backend.

How is this different from running Cypherz in production?

In production, Cypherz also stores the token mappings encrypted in a vault so the original values can be restored when the AI responds. The tokens you see here are visual-only — generated by a non-cryptographic hash for demo purposes. The real product uses HMAC-SHA-256 with a per-project key.

Why are there false positives?

Regex detection has limits. The production product can be augmented with per-project custom dictionaries and toggle-able detector categories to tune false positives. This page uses the defaults across the board.

Can I use this commercially?

Use the tool freely for your own evaluation. To get tokenize/detokenize round-trips, audit logs, and a real vault in production, sign up — it's free up to 50k requests/month.

Where to go next