Anonix® is our own product. The privacy proxy sits between software and the AI provider: before a request reaches ChatGPT®, Claude® or Gemini®, Anonix® replaces names, account details and case numbers with placeholders. In the response, it puts the originals back. The software changes two lines, the API address and the API key; for staff, nothing changes at all. Concept, software and SaaS operation are ours, and so are the name, the logo, the corporate design and the anonix.ai website.
Film
Brief
Every AI prompt is a data transfer. Staff paste patient data into ChatGPT®, specialist applications send citizens' data to the AI provider via API. Banning the tools achieves little; people keep using them, only without protection. A data centre in Frankfurt is not enough either, because the US CLOUD Act applies according to where the provider is based, not where the server stands. The goal was a way to use AI without personal data leaving the organisation.
How it works
Four checks before the AI sees a thing
- Your application: Request in plain text
- Anonix®, operated in the EU, 01 Pattern recognition (Email, IBAN, dates): t.richter@kanzlei-richter.de → [EMAIL_1], 22.04.2026 → [DATE_1]
- Anonix®, operated in the EU, 02 Language understanding (Names in eight languages): Dr. Thomas Richter → [PERSON_1], Ingrid Bergman → [PERSON_2]
- Anonix®, operated in the EU, 03 Industry terms (Own categories, no training): Ref. 7 O 234/26 → [CASE_NO_1]
- Anonix®, operated in the EU, 04 Independent review (A dedicated AI reads it again): LG Frankfurt → [ORG_1]
- Placeholders only from here: AI provider
- Originals restored, even when streaming. Mapping held in memory only
- Response with original data
Each stage catches what the one before it missed. Anonix® does not store the mapping; it exists only in memory while a request is processed.
Result
Anonix® checks every request in four stages: pattern recognition for fixed formats such as IBANs or tax IDs, language understanding for names, places and organisations in eight languages, custom industry terms with no training, and finally an independent AI. Same value, same placeholder, so the AI still understands what the matter is about. The mapping exists only in memory during processing. Streamed responses are restored as they arrive.
In figures
- 4
- Checks on every request
- 8
- Languages, from German to Polish
- 2
- Lines of code to integrate
- 23
- Pages of styleguide
Project data
A product of our own, from concept to operation
- Product
- Privacy proxy for AI applications, as SaaS
- Platform
- Python and React
- AI providers
- OpenAI and compatible APIs, Claude®, Gemini®, Mistral, DeepSeek, Grok, Groq, Perplexity® and self-hosted models
- Security
- AES-256-GCM, Argon2id, two-factor sign-in, roles, rate limiting and CSRF protection
- Operation
- EU infrastructure, on-premise on request, a separate database per tenant
- Billing
- By number of requests, unlimited users
- Python
- React
- SaaS
- Pseudonymisation
- Streaming
Use AI. Protect data.
Name, logo and corporate design
The name and the logo are ours. The wordmark is a graphic of square modules on a fixed grid, drawn like a dot matrix. The A and the X are in signal yellow, and on its own the A is the brand mark. Yellow is a signal, not a background colour, and slate tones and white carry the rest. The recurring motif is the mechanism itself: original, placeholder, original.
Brand colours
- SignalAccent, never a background#FBFF0ARGB 251 255 10
- Slate 950Main surface on dark#020617RGB 2 6 23
- Slate 900Second dark surface#0F172ARGB 15 23 42
- WhiteSurface and text#FFFFFFRGB 255 255 255
Logo, colours, type
Grids and templates
Questions about this project or a new one
Liked this one? We can do it with your logo, too.
Send us an email or give us a call. A few sentences about your plans are enough to start with.
