Use any AI.
Keep your secrets.
Tightlip swaps names, account numbers and patient details for placeholders on your device. The AI answers the placeholder version. Your device puts the real values back.
State bars are telling lawyers to anonymize what they give AI.
Read two more opinions on the law page“If client confidences and secrets are not protected by the GAI tool, then the lawyer must anonymize their inputs to protect client details.”
Tightlip does the anonymizing step on your computer, before the prompt goes out.
Bar opinions are guidance. Your jurisdiction’s rules and your client’s instructions govern.
Three steps, all on your side of the wire.
1
Find
On your device, Tightlip reads what you are about to send and finds names, account numbers, case numbers, patient IDs, keys and more.
2
Swap
Each value becomes a placeholder such as [PERSON_1]. The same person always gets the same placeholder, so the AI can still follow who did what.
3
Restore
The AI answers with placeholders. Tightlip puts the real values back on your device. The swap table never leaves it.
Exactly what leaves your device.
Your security team will ask. Here is the whole answer. The full data flow, with every permission the extension asks for, is on the security page.
Read the data flow- To the AI provider
- The protected text, with placeholders such as [PERSON_1] in place of real values.
- To Tightlip
- A count of credits used. In the web workspace, the protected text also passes through our server on its way to the model. We do not store it or log it.
- Stays with you
- Your original text and files stay on your device. So do your always-protect list and the swap table that turns placeholders back into real values.
Built for people with a duty to keep quiet.
- Law firmsClient names, matter facts, case numbers and settlement accounts stay out of the prompt.[PERSON_1][CASE_NUMBER_1][ORG_2]
- Banks, credit unions and insurersCard and routing numbers are confirmed by their check digits before they are swapped, along with account and Social Security numbers.[CREDIT_CARD_1][ROUTING_NUMBER_1][SSN_1]
- Practice admin and health-techPatient names, record numbers, Medicare IDs and dates are swapped before a billing note or support ticket reaches an AI.[MRN_1][MBI_1][DATE_1]
- Software teamsSwap your customers’ personal data out of prompts before they reach a model provider, and give your security reviewer a clear answer.[EMAIL_1][SECRET_1][IP_ADDRESS_1]
Use the AI you already have.
Bring your own ChatGPT, Claude or API key, or use ours in the web workspace. The protection works the same way in all four.
Web workspace
For anyone. Nothing to install.
Paste text or drop a PDF or Word file. See exactly what the AI will get, then chat. The AI model is included in the credit.
Browser extension
For people who already use ChatGPT, Claude, Gemini, Copilot or Perplexity.
Protects the message box when you press send and restores the reply on the page. You keep your own AI account.
SDK
For teams shipping AI features.
Wrap your OpenAI or Anthropic client in two lines. Personal data it finds is swapped before the request leaves your server.
Local proxy
For tools you cannot change.
Run one command and point any OpenAI- or Anthropic-compatible tool at it. Requests are protected and replies restored on your machine.
USD 0.05
per protected prompt. No seats, no subscription.
- USD 20 of free credits when you sign up. That is 400 protected prompts.
- Top up from USD 100 when you need more.
- With the extension, SDK and proxy you only pay when Tightlip actually protects something.
Where Tightlip stops.
Detection can miss things. Tightlip shows you what the AI will see before you send it. Add client names, matter names and project code names to your always-protect list.
Your AI policy still applies. Tightlip reduces what reaches an AI tool. Use it with AI tools your organisation already allows.
The answer is still the AI’s answer. Read it with the same care you would give a junior colleague’s draft.