Privilege and professional secrecy don't bend for convenient tools. You shouldn't have to redact every name in a pleading by hand before pasting it into ChatGPT or Claude — and then un-redact the whole answer afterwards. That's what we do for you, automatically, before anything leaves your computer.
No card required. You land straight in a simple chat — drop a file and ask.
Three steps. No setup, no training, nothing to install. If you can attach a file to an email, you can use this.
Drag in the contract, pleading, witness statement or due-diligence document. Before anything leaves your computer, emails, phone numbers, bank and card numbers and national identity numbers are swapped for neutral placeholders automatically when their format matches a pattern rule.
"Summarise the other side's arguments." "Find the termination clauses in this contract." "Draft a first reply to this letter." The AI does its work seeing only the placeholders — not the details we detected.
The reply comes back with the real names restored — automatically, exactly where they belong. No find-and-replace, no un-renaming, no copy-paste gymnastics. Just the finished answer.
We can't leak your client data in the clear — we keep no readable copy of it. The swap happens before your file leaves your machine, and we keep nothing readable afterwards: no clear-text copies of your documents or the answers. The only content-adjacent state is tokenised and transient — response buffers purged hourly, and opt-in multi-turn maps, stored client-encrypted (data map). There is nothing in the clear on our side to breach, subpoena or lose.
Lawyers carry legal professional privilege and a duty of confidentiality — in most jurisdictions the strictest secrecy obligations any profession has. Here is what the architecture actually does, so you and your own advisers can evaluate AI use against them — this is not legal advice.
The workarounds people use today are slow — and fragile.
The manual rename. "Party A", "Company X", find-and-replace before pasting — then reversing it all in the answer, hoping you didn't miss one instance on page 14.
The retyped summary. Typing an anonymised version of the document by hand because uploading the real one feels wrong. Half an hour gone before the AI has even started.
The quiet rule-break. Pasting the real thing and hoping it's fine. It's the fastest option — and the one that can cost you a client — or your practising certificate.
The blanket ban. The firm forbids AI entirely, and the productivity gain everyone else is getting goes to your competitors instead.
The duty of confidentiality isn't unique to law. If your clients trust you with their private affairs, this is built for you too.
Plain answers, no fine print surprises.
The leading AI models — the same ones behind ChatGPT, Claude, Gemini and others. The difference is what they're allowed to see: with us in between, they get your question and a version of your document with the identifying details we detect replaced by placeholders. They do the thinking; they never see the details we replaced.
The swap list — which real name maps to which placeholder — is created on your device and used to restore the answer on the way back to you. It's applied automatically, so the document you download reads exactly as if the AI had seen the real names all along.
Every request comes with a signed, tamper-evident receipt: a small certificate recording when the request happened and that the protections were applied. You can verify it independently, months later, and keep it in the matter file.
No clear-text copies. We keep no readable copy of your documents, your questions or the answers — the only content-adjacent state on our side is tokenised and transient (response buffers purged hourly; opt-in multi-turn maps, stored client-encrypted). Once your download completes, the readable version exists only on your machine. That's the point: we can't leak what we can't read.
We can't advise on privilege rules in your jurisdiction — your professional body can. What we can tell you precisely is what leaves your machine: your question and a version of the document with the identifying details we detect replaced by a neutral placeholder. The AI provider never receives your client's identity, and we retain nothing. The signed receipt records exactly what was protected, so your own file shows the care you took.
No. Create a free account and you land directly in a simple chat. Drop a file, ask your question — that's the whole workflow. Prefer to stay in the tools you already use? After you register, you can install a small browser add-on for Chrome or Firefox and keep using ChatGPT, Claude, Gemini or Grok as you do today — names, emails and account numbers are replaced inside your browser before anything is sent, and the add-on downloads from your account page. (If your firm has an IT team that wants to connect it to internal systems, there's a full technical setup for them too, but you never need to touch it.)
Free to start, no card required. Drop a document, ask your question, and see the answer come back with the names where they belong.
Questions first? Write to hello@cloakapi.io — a human answers.