Free for personal use. Licensed for client work.

Every plan includes unlimited documents with no per-document or per-page fees. Masking works offline in your browser. Each file can be up to 20 MB and 100 pages. Commercial pricing covers the right to use it on real client and patient work.

Enterprise

Custom

 

For organizations with procurement, residency, or air-gapped requirements, and for teams embedding masking in their own product.

Start a pilot

Four steps. Every plan.

  1. Paste or drop it in

    Paste text, or drop a screenshot, PDF, or file.

  2. Review what was found

    Names, dates, and identifiers are listed. You pick what to mask.

  3. Share the masked copy

    Give the masked copy to ChatGPT, Claude, or another model.

  4. Paste the reply back

    Paste the reply back and your real values return, on your machine.

What each plan covers.

Plan capability comparison
CapabilityPersonalCommercial licenseEnterprise
Runs in your browser · nothing uploadedIncludedIncludedIncluded
Unlimited documents · no per-document or per-page feesIncludedIncludedIncluded
Text, screenshots, PDFs, and filesIncludedIncludedIncluded
Names, dates, addresses, and identifiersIncludedIncludedIncluded
Review and adjust before you shareIncludedIncludedIncluded
Reversible restore on your machineIncludedIncludedIncluded
Personal use and trial evaluationIncludedIncludedIncluded
Client, patient, and professional workNot includedIncludedIncluded
Detector-rule updatesAs releasedWhile subscribedTerm of agreement
Named contact for support and feedbackNot includedIncludedIncluded
Residency, air-gapped, and zero-retention reviewNot includedNot includedIncluded
SDK for embedding masking in your own productNot includedNot includedOn request

Common questions

Does PHI Mask store or log my data and files?

No. Detection and masking run locally in your browser, and your original input, filename, detected values, and stand-in map stay on your machine. See the Data Usage Policy.

Does PHI Mask read handwriting?

No. Handwriting is not read on this device, so anything handwritten was not masked. Select it yourself to mask it.

What about handwritten forms?

Printed fields still mask normally · that is not a sign the handwritten ones were checked. Treat every handwritten entry as unmasked.

Is PHI Mask HIPAA compliant?

PHI Mask is HIPAA-compatible. Your file/data never leaves your browser which prevents the need for a BAA, but without a signed BAA we cannot claim HIPAA compliance.

Do I need a Business Associate Agreement (BAA) with PHI Mask?

A business associate agreement (BAA) covers a vendor that creates, receives, maintains, or transmits protected health information for you. Your file never leaves your browser, so we hold none of it and there is nothing to sign.

Does masking make a document de-identified under HIPAA?

Not by itself. Safe Harbor de-identification requires every one of the eighteen identifier types to be gone, and expert determination is a separate formal route. PHI Mask finds what it can and shows you the result · your review is the gate, not the detection. Handwriting is never read on this device, so check those fields yourself.

What about the assistant I send the masked copy to?

Sending a masked copy is still a disclosure to whoever receives it. Anything the mask missed travels with the file. Check the terms of the tool you paste into and whether your organization needs its own agreement with that vendor · that is a separate question from PHI Mask.

Can I use this for client or patient work?

Personal use is free. Any professional, clinical, or client use (for patients, clients, a firm, or a practice) requires a commercial license. To start a pilot, request access.

Is PHI Mask open source?

No. PHI Mask is commercial software: personal use is free and commercial use requires a license. We plan to publish source you can read for personal use once enterprise licensing makes that sustainable.

Can I get the real values back?

Yes. The masked content is reversible and is mapped back to your real values on your machine.

How does monthly commercial billing work?

The commercial plan is billed monthly per seat. Seat changes are intended to take effect immediately with a prorated Stripe invoice. Canceling stops the next renewal; access continues through the current paid period. Cancellation does not automatically issue a refund.

Does my Stripe invoice act as my license?

The invoice confirms payment and is useful for your records, but it is not the seat assignment by itself. Keep the invoice number available if you need help connecting the purchase to your PHI Mask account or workspace.

How do I get billing help?

Use the request form for activation, seat, cancellation, refund, or invoice questions. Include the Stripe invoice number if you have one. Never send card details, PHI, or original files. use the request form.