For accountants & bookkeepers

Use AI on client documents with on-device privacy checks.

You shouldn't have to rename every client in every file by hand before pasting it into ChatGPT or Claude — and then un-rename the whole answer afterwards. Our on-device detector makes a best-effort pass before supported content is sent. It can miss identifying details, so review content before sending. See Terms of Service §7b, Known limitations.

No card required. You land straight in a simple chat — drop a file and ask.

Illustrative substitutions
Berg & Marston LLP→Company A
Margaret Okafor→Person 1
Acct 4402-7719-0032→Account X
margaret@bergmarston.com→Email 1
A client may restore detected stand-ins in a response; check the result for accuracy. On-device detection can miss details. Review the content shown before sending. See Terms of Service §7b.

How it works

Three steps. No setup, no training, nothing to install. If you can attach a file to an email, you can use this.

1

Drop your file

Drag in the spreadsheet, contract, ledger or letter you're working on. On supported client paths, the client makes a best-effort pass for identifying details before sending. Coverage varies by content and format, and detection can miss. Review the content your client shows; see Terms of Service §7b, Known limitations.

2

Ask your question

On supported paths, the client attempts to replace personal data it detects with placeholders. Detection may miss details, so unmatched content may reach your selected AI provider. Review the content your client shows before sending; see Terms of Service §7b, Known limitations.

3

Download the answer

A client may use its local mapping to restore values it detected in a response. Detection and restoration can be incomplete, so review the result before relying on it.

Detection is best-effort on supported client paths. It can miss identifying details or formats; unmatched content may be sent to your selected AI provider. Review the content your client shows before sending; see Terms of Service §7b, Known limitations. File and image handling varies by client and type; not every client shows prepared content before sending. Read the data map for service data handling.

Name and identifier coverage varies by client and content type. Detection may miss details, and file handling can differ by format. Review the content your client shows before sending. If your client offers a “send unchanged” option and you select it, the original file bytes go to your selected provider. See Terms of Service §7b, Known limitations and available client options.

Built for people who are required to keep secrets

Accountants, bookkeepers and auditors carry a professional duty of confidentiality. Here is what the architecture actually does, so you and your own advisers can evaluate AI use against that duty — this is not legal advice.

Best-effort on-device checks

On supported client paths, the client attempts to replace values it detects before sending. Detection can miss details; unmatched text or a file sent unchanged may reach your chosen provider. See Terms §7b and the data map.

Works with your files

PDF, Word, Excel, CSV, plain text — the files you already work in, no conversion or special format needed.

A receipt you can keep

When CloakAPI issues a receipt, its signed envelope records the claims it contains and can be independently verified. It does not show that every personal-data value was found or that every request produced a receipt.

Confidentiality-friendly by design

On-device detection aims to reduce personal data sent to selected AI providers, but it can miss values and is not a compliance guarantee. File and image handling differs by client; review content before sending. See Terms §7b, Known limitations and consult your own advisers about your duties. See the details.

Sound familiar?

The workarounds people use today are slow — and fragile.

→

The manual rename. "Client A", "Company X", find-and-replace before pasting — then reversing it all in the answer, hoping you didn't miss one instance on page 14.

→

The retyped summary. Typing an anonymised version of the document by hand because uploading the real one feels wrong. Half an hour gone before the AI has even started.

→

The quiet rule-break. Pasting the real thing and hoping it's fine. It's the fastest option — and the one that can cost you a client, or a licence.

→

The blanket ban. The firm forbids AI entirely, and the productivity gain everyone else is getting goes to your competitors instead.

Accountants first. Every confidential profession next.

The duty of confidentiality isn't unique to accounting. If your clients trust you with their private affairs, this is built for you too.

Common questions

Plain answers, no fine print surprises.

Which AI does the answering?

On supported client paths, the client attempts to replace personal data it detects before sending. Detection is best-effort and can miss content, so unmatched details may reach the AI provider you selected. Review what your client shows before sending; see Terms of Service §7b.

How do the real names get back into the answer?

A client may use a local mapping for values it detected to try to restore stand-ins in a response. Detection and restoration may be incomplete, so review the result before relying on it.

What if I need to prove I handled a document properly?

When issued, a receipt records the claims in its envelope and can be independently verified. It does not prove that every personal-data value was found or that every request produced a receipt.

Do you keep a copy of my files?

File handling varies by client and type, and not every client shows prepared file content before sending. Detection may miss personal data. Review what your client displays; see Terms of Service §7b. If your client offers a “send unchanged” option and you select it, the original file bytes go to your chosen provider.

Is this hard to set up?

Create an account to use the browser chat. Before sending, review the content your client displays; detection is best-effort and may miss details. File handling varies by client and type. If a client offers “send unchanged” and you select it, the original bytes go to your chosen provider. See Terms of Service §7b. The browser add-on is available from your account page; an IT team can handle setup for internal systems if needed.

Try it on a real client file — today.

Free to start, no card required. Drop a document, ask your question, and see the answer come back with the names where they belong.

Questions first? Write to hello@cloakapi.io — a human answers.