AnonymFilesAnonymization and pseudonymization software for healthcarePseudonymize your medical documents before AI, without them leaving your computer.
Medical reports, letters, discharge summaries, in Word, PDF or scan: patient names, French social security numbers (NIR), patient IDs, dates of birth and contact details become labels before ChatGPT or Claude. Your originals and the real names never leave your computer.
The “Get notified at launch” button opens your e-mail app. Otherwise, write to contact@anonymfiles.com.
From €290 excl. VAT per year for one seat; a group practice of 4 doctors: €1,160 excl. VAT per year. See pricing →
Coming soon for Apple silicon Macs (app signed and notarized by Apple) and Windows 10/11. No account, no telemetry, no online license check. On a Mac, turn off Wi-Fi right after installing: nothing changes.
Compte rendu de consultation
Patient : M. Jean LefèvrePERSONNE 1, né le 14/03/1958DATE 1, NIR 1 58 03 75 112 045 68IDENTIFIANT 1.
Adressé par Dr Claire MorelPERSONNE 2 pour le bilan d'une dyspnée d'effort.
Masked in this document
Fictional example.
What your profession requires
Medical secrecy doesn't stop at ChatGPT's door.
Pasting a medical report into an online AI means handing identifiable health data to a third party. AnonymFiles replaces the patient's identity first, on your computer: no host is involved.
Medical secrecy
Anyone cared for by a health professional or facility has the right to “respect for their private life and the secrecy of information concerning them” (French Public Health Code, art. L. 1110-4, our translation). Disclosing secret information is punishable by one year in prison and a €15,000 fine (French Criminal Code, art. 226-13).
Health data and the GDPR
Data concerning health is a special category: processing it is prohibited, except in a limited list of cases (GDPR, art. 9).
Certified hosting
In France, a provider hosting digital health data on behalf of a professional or facility must hold the HDS certification (Public Health Code, art. L. 1111-8). Pseudonymizing on the computer avoids handing patients' identities to an AI service.
Sources: Code de la santé publique, art. L. 1110-4 · GDPR, art. 9 · French Digital Health Agency (ANS), health data hosting · French Criminal Code (Code pénal), art. 226-13.
Use cases
What you can give the AI, and what to mask first.
Summarize a patient file
The AI reads reports and letters and draws up a chronological summary.
Mask first: the patient, relatives, colleagues and their contact details (automatic); a rare condition or a hospitalization date if they identify the patient (one click).
Prepare a discharge letter
Structure the discharge summary or the letter to the GP.
Mask first: the identity of the patient and practitioners, the social security number, the patient ID and the stay number.
Rephrase for the patient
Explain a report in plain language, before reviewing it yourself.
Mask first: the patient's identity; the answer comes back with the real names, on your computer.
Prepare an expert report or a case presentation
Build the outline of an expert report or a case study.
Mask first: everything that identifies the patient, including their town and job when they are rare.
How does it work in your practice?
From the patient file to an AI-ready copy.
Drop in the file
Reports, letters, discharge summaries, results, in Word, PDF, scan or e-mail, subfolders included. The same patient keeps the same label in every document.
Review
Original and copy side by side. One click masks a missed name, an amount or a passage. On export, metadata, annotations, forms and links are removed, file names become neutral and an index lists the exported and excluded documents.
Work with the AI
Give the copy to the AI of your choice (ChatGPT, Claude, Le Chat, Copilot…) so it can help you summarize a patient file, prepare a discharge letter or rephrase a report for the patient. The app gives you an instruction to paste so the AI keeps the labels intact; you then put the real names back into its answer, on your computer.
Step by step: anonymizing a document before ChatGPT · re-identification risk · the mapping table · anonymization vs pseudonymization · anonymizing a scanned PDF · Claude, ChatGPT, Mistral: what leaves, what stays.
Which documents?
What you can anonymize today.
- Consultation, hospital and surgical reportsWord or text PDF
- Letters and discharge summariesWord, text PDF or .txt
- Results, prescriptions and scanned documentsPDF or image, read by local OCR
- E-mails.eml or .msg
- Tracking tables and exports.xlsx, .xls or .csv, one table per sheet
Text or scanned PDF, 50 MB maximum per file (10 MB for text and spreadsheets); a scan is read by local OCR. The copy of a Word file is a .docx that keeps its layout, with a text file for the AI; the copy of a spreadsheet is a redacted workbook (.xlsx or .csv, values without formulas), with a text copy; the copy of a presentation or an e-mail is a text file.
Which approach?
Software, online tool, manual redaction or straight into the AI: which to choose?
Four ways to prepare a case file before AI. Only one processes the whole file without anything leaving your computer, then puts the real names back into the answer.
| Approach | Where the document goes | Whole case file | Scans and Word | Real names put back | Time for a 30-document file |
|---|---|---|---|---|---|
| AnonymFiles | Nowhere: everything happens on your computer | Yes, same labels across every document | Yes: local OCR, Word and PDF redacted in place | Yes, as text, Word or PDF | A few minutes of processing, then your review |
| Online anonymization service | To the provider, before being anonymized | Often in batches or with quotas | Depends on the service | Depends on the service | Upload, processing, download |
| Manual redaction (Acrobat, Word) | Nowhere | No: file by file | PDF in Acrobat; in Word, text must be deleted, not highlighted | No | Slow: every name, in every document, by hand |
| Pasting the document into the AI | To the AI provider, names included | Not applicable | Yes | Not applicable | Instant, but the names are already gone |
The detail, software by software: our anonymization software comparison.
How much for a practice or a department?
A price per seat, not per page.
For working alone or as a pair. Entire folders, batch processing, real names put back. E-mail support within 2 business days.
Get notified at launchEverything in Pro, plus priority support within 1 day. Example: a group practice of 4 doctors, €1,160 excl. VAT per year.
Get a quoteNo limit on seats: a conversation to understand your organization, a quote, then a supported roll-out and a dedicated contact.
Write to us- No online license check, ever.
- No account, no telemetry.
- Updates included for as long as your subscription runs.
A question about the plans? Write to contact@anonymfiles.com.
Frequently asked questions
Questions from healthcare professionals.
What software can pseudonymize medical documents?
AnonymFiles, anonymization and pseudonymization software installed on the practice's or department's computer. It stands out on three points: it processes the whole case file with the same labels across every document, it redacts Word and PDF files inside the document itself, layout preserved, and it puts the real names back into the AI's answer. Everything happens on your computer, with no account and no network call for the license. It recognizes the French social security number (check key verified) and health identifiers announced as such (RPPS, ADELI, FINESS, IPP, INS). €290 excl. VAT per seat per year, €240 excl. VAT per seat from 3 seats, no page quota. Our anonymization software comparison.
Is it compatible with professional secrecy?
Yes, for preparing the copies: processing happens on your computer, and no third party receives your documents. What you then give to an AI, and to which one, remains your decision: only the reviewed and approved copy is meant for that.
Which health identifiers are masked automatically?
The names of the patient, relatives and colleagues, addresses, e-mails and phone numbers, the French social security number (NIR, check key verified), the date following “né le” or “date de naissance”, and, when announced as such, RPPS, ADELI, FINESS, IPP, stay (NDA, IEP), INS and health insurance membership numbers. Medical vocabulary stays readable.
Does an AI service that receives a report need HDS certification?
French law requires HDS certification from anyone hosting health data on behalf of a professional or facility (Public Health Code, art. L. 1111-8). A copy pseudonymized on the computer no longer contains the patient's identity; it remains personal data as long as the mapping table exists, but that table never leaves the computer. Your DPO remains the right person to assess the processing.
Can it be used for research?
To prepare extracts of files before an analysis, yes. Health research in France has its own framework (CNIL reference methodologies or authorization): AnonymFiles prepares the documents, it replaces neither the impact assessment nor the formalities.
Can an anonymized copy still identify someone?
Yes, if an indirect detail remains visible: a rare condition, a hospitalization date, the name of a very specialized department, an unusual job or a small town. That's why each document is reviewed side by side before export, and one click masks whatever detection missed.
General questions (pseudonymization, which AI to use, scans, checking the network, compatible computers): the How it works FAQ.
Coming soon
The next report you give to an AI can keep the patient's identity with you.
Coming soon for Apple silicon Macs and Windows 10/11. No account, no telemetry. The button opens your e-mail app; otherwise, write to contact@anonymfiles.com.