# Z-Mask | Personal Data Masking & Document Redaction · ZCNTech Mask personal data in PDFs, scanned images and text with Z-Mask. Review redactions, integrate the REST API or discuss on-premises deployment. Try 3 free pages. Source: https://z-mask.com/ PERSONAL DATA MASKING PLATFORM # Keep your data useful. Keep personal details private. Mask personal data in text, documents and tables before it reaches AI, analytics and testing systems. [Start masking](https://z-mask.com/en/app/)[Plan a pilot](mailto:info@zcntech.com) Multilingual recognitionConsistent tagsOne REST API Human resources01 / 04 ## Employee payslip October 2026 · Employee pay statement HR-2026/118 · 17/10/2026 Scanning document…4 personal fields foundPersonal fields masked EmployeeEmma Walker Employee IDEMP-00482 Payment accountGB82WEST12345698765432 Contactemma.walker@example.com Pay item | Amount | Gross pay | GBP 4,500.00 | Deductions | GBP 1,020.00 | Net pay | GBP 3,480.00 | Pay items stay useful; employee identity and bank details are masked. Personal fields masked Fictional document · No real personal or company data WHEREVER DATA IS USEDAI workflowsDocument sharingTest environmentsData analytics SECURE REDACTION ## GDPR-focused document redaction. ### GDPR Support data minimization by masking personal data before sharing, analytics and AI workflows. ### Privacy by design Raw files and restore mappings are not written to processing history; users download the results directly. ### Automatic deletion New PDF jobs retain encrypted original and redacted copies for authenticated history access. On-premises storage and retention are agreed for your deployment. ### Hosting options The SaaS setup can be positioned for EU-region hosting, while the on-prem option remains available. SECURITY LAYERS ## A controlled path from upload to final output. Review transport, storage, administrator access and retention before choosing a deployment. Our Privacy Policy explains the current SaaS safeguards and limitations; enterprise controls are agreed separately. ### Secure transfer Browser and API access use HTTPS. Archive copies are encrypted before transfer; the archive FTP channel itself does not currently use TLS. See the Privacy Policy for details. ### Encrypted storage Original and redacted PDF archive copies are encrypted before storage. On-premises storage requirements are scoped with your infrastructure team. ### Separated key policy Encryption keys and document data are managed separately. Restoration mappings are used only in workflows that need them, with limited access. ### Controlled AI processing Depending on the deployment model, recognition services can run locally or in isolated environments without requiring documents to be sent to public LLM providers. ### Reduced human access Upload, scan, mask and download steps run automatically. Operational access is minimized and limited by the organization’s policy. ### Retention control SaaS PDF archives currently have no automatic expiry. Contact us for archive deletion. Enterprise retention requirements are agreed as part of deployment planning. ### Deployment choice With SaaS, private cloud or on-premises deployment options, data location, network access and capacity model can be selected for your needs. ### Auditable workflow The searched entity types, applied methods and output timing can be tracked without unnecessarily logging sensitive content. THREE NEEDS. ONE PLATFORM. ## Control personal data in every format. 01 ### Text masking Replace personal data in call notes, emails and complaints with consistent tags. Restore tagged AI responses using the mapping. Text · Batch text · LLM workflows 02 ### Documents and images Read scanned pages. Redact personal fields, faces, signatures and QR codes, then download a masked PDF. PDF · PNG · JPEG 03 ### Tables and databases Discover personal data columns automatically. Use format-preserving synthetic values, tags or partial masking. CSV · Excel · SQLite SAAS · BATCH PROCESSING · REST API ## Start in the workspace. Connect your workflow. Use Z-Mask for a single text or a recurring data pipeline. The web workspace and API use the same masking services. 01 ### Web-based SaaS Sign in to process text, PDFs, images or tables. Choose masking settings, download the output and review your processing history. [Open the workspace](https://z-mask.com/en/app/) 02 ### Batch masking Mask multiple texts in a JSON array with one request. Process many records in CSV, Excel and SQLite files using column-specific methods. [Try batch processing](https://z-mask.com/en/app/) 03 ### REST API for your application Send requests directly from CRM, document management, analytics and AI workflows. For document collections, build a workflow that submits each file in sequence. [Discuss API integration](mailto:info@zcntech.com?subject=Z-Mask%20API%20integration) ### From customer data to usable output - Receive data - Choose a masking policy - Process via API - Use the masked output CRM notes → batch text masking · Document archive → per-file redaction · Test data → column masking · LLM → mask, then restore the response with a mapping PRICING ## Start with the page volume you need. From one-off document masking to team workflows: try it with free page credits, then add more page credits through Stripe when needed. [Open the workspace](https://z-mask.com/en/app/) Z-Mask ### Free For personal trials and small one-off tasks. €0/month - Single document upload - Up to 25 pages per document - 3 free pages - Z-Mask redaction AI [Start free](https://z-mask.com/en/app/?auth=register) Z-Mask ### Basic For small teams with recurring document redaction needs. €9/month per user EVERYTHING FROM FREE, PLUS - Up to 500 pages per month - Up to 75 pages per document - Email support - Signed Data Processing Agreement [Get Started](https://z-mask.com/en/app/?auth=login&plan=basic) Most popularZ-Mask ### Pro For companies processing high-volume document archives for compliance. €45/month per user EVERYTHING FROM BASIC, PLUS - Up to 2,500 pages per month - Automated bulk redactions - File share integrations - Custom categories and entity types [Get Started](https://z-mask.com/en/app/?auth=login&plan=pro) Z-Mask ### Enterprise Enterprise deployment on your own infrastructure, with installation and integration scoped to your organisation. Customenterprise EVERYTHING FROM PRO, PLUS - 100,000+ pages per month - On-premises or private cloud - Custom retention policy - Priority support [Contact sales](mailto:info@zcntech.com?subject=Z-Mask%20Enterprise%20on-premises%20deployment) PRACTICAL NEEDS, CONCRETE EXAMPLES ## Preserve the meaning. Control personal details. From banking to healthcare and legal files to customer conversations: a masking workflow that keeps data useful. ### Prepare bank statements, payroll exports and complaints for review without exposing UK payment identifiers. 5 personal data items found BankingCaseFIN-2026/483 Date12-10-2026 SubjectPayroll export and complaint review Scanning document...Payroll review for Emma Clarke shows net pay of GBP 3,420.18 sent to sort code 20-45-78 and account number 11876543. The same file includes National Insurance number QQ 12 34 56 C and a complaint email from emma.clarke@example.com about a delayed refund reference. Request: share the payment timeline with finance and legal while keeping payroll identifiers out of analytics and AI summaries. Redacted with Z-Mask Salary amount, complaint context and payment status remain usable; names, sort codes, account numbers and NI references are masked. ### Share clinical notes for triage or quality review while removing patient identifiers from the narrative. 6 personal data items found HealthcareCaseNHS-2026/219 Date09-10-2026 SubjectTriage note review Scanning document...Patient Oliver Bennett called NHS 111 after chest tightness; the record lists NHS number 485 777 3456 and date of birth 14/02/1979. Dr. Hannah Price advised urgent assessment if symptoms return and asked that discharge notes are not emailed to oliver.bennett@example.com. Callback number: +44 7700 900123. Clinical risk, medication class and follow-up interval can remain visible for review. Redacted with Z-Mask Symptoms, risk level and follow-up plan remain readable; patient identifiers and contact data are redacted before sharing. ### Review DSAR and SAR bundles while separating the requester’s data from third-party personal data. 4 personal data items found LegalCaseSAR-2026/771 Date01-10-2026 SubjectSubject access request Scanning document...The requester James Whitfield asked for interview notes and internal correspondence linked to case HR-DSAR-4491. Panel comments mention line manager Rachel Morgan and include a handwritten note from Tom Hughes about performance concerns. Before disclosure, the reviewer must decide which third-party names, email addresses and opinion notes should be redacted under UK GDPR. Redacted with Z-Mask The factual timeline stays intact; staff names, third-party identifiers, addresses and private notes can be consistently hidden. ### Clean support ticket history before retention review, AI summarisation or DSAR export. 5 personal data items found Customer serviceCaseSUP-2026/604 Date11-10-2026 SubjectSupport ticket retention Scanning document...Sophie Martin: Please delete the old support tickets on account AC-448291; they include my home address 42 Camden Road, London NW1 9XY. Agent: I confirmed contact details as +44 7700 900456 and sophie.martin@example.com before escalating the erasure request. Outcome: retention basis and deletion status can stay visible for audit, while personal fields are masked in exports and analytics. Redacted with Z-Mask Ticket category, SLA and resolution remain clear; names, address, email, phone and account identifiers are removed. Examples use fictional data. Results vary with the selected data types and masking policy. SECURE DATA FLOWS FOR AI ## Send context to AI. Keep identities within your organization. Tag personal fields before calling a model for call summaries, email replies or document analysis. Restore response tags using the mapping data. 01 ### Receive data Your application receives a call note, email or customer request. 02 ### Mask with Z-Mask Selected fields become consistent tags such as [PERSON_1] and [PHONE_1]. 03 ### Process with the model A cloud or on-premises model generates a summary or reply from the masked content. 04 ### Restore the response Use the mapping in your own workflow to restore tags to their original values. Your organization manages access to mappings for reversible tagging. For test data, choose other methods such as synthetic values or hashes. BEYOND TEXT: THE ENTIRE DOCUMENT ## From scan to shareable PDF. Read text with OCR and mask faces, signatures, QR codes and barcodes alongside personal fields. Review the boxes, add missing areas manually and download the result. ### ID cards and passports Names, ID numbers, dates of birth, photos and machine-readable passport fields. ### Property deeds and powers of attorney Rights holders, family details, identity fields and signatures in document-specific layouts. ### Petitions and civil registers Personal fields in dense text, multi-row tables and rotated scans. ### Technical plans and forms Headers, engineer names, phones, addresses and signatures while preserving the drawing's technical content. MULTILINGUAL DATA RECOGNITION ## Precise validation rules. Flexible AI recognition. A validation rule engine works alongside a multilingual recognition model. Personal details are masked while organization and place names remain readable. Person nameEU national IDIBANPhoneEmailAddressCard numberDate of birthProperty ### Custom entity types Define your own data types without retraining or code changes. By descriptionmedical diagnosis → [DIAGNOSIS_1] By patternCUST-482913 → [CUSTOMER_ID_1] By term listProject Atlas → [PROJECT_1] FROM PRODUCTION DATA TO TEST AND ANALYTICS DATA ## The right method for each column. Profile columns in CSV, Excel and SQLite files. Choose a method for each data type and use case; preserve relationships through consistent transformations. Method | Example output | Use case | Synthetic value | Emma Clarke | Realistic test data with valid formats for supported types. | Tag | [PERSON_1] | Track people and record relationships with readable tags. | Partial masking | E*** C***** | Keep only the necessary part of a value visible. | Hash | 7f42a… | Create a consistent representation without revealing the original value. | Redaction | ████████ | Hide the field's contents entirely. | Column-level policies EU national ID, IBAN and card validation Consistent record mappings INTEGRATE WITH YOUR EXISTING SYSTEMS ## One API. Multiple workflows. Connect the workspace's masking engine to your own applications. Use a shared service layer for text, document and table processing. ### Recognition and validation Multilingual recognition with validation rules for EU national IDs, IBANs and card numbers. ### Your organization's policies New entity types through descriptions, regular expressions and term lists, with selectable types and thresholds. ### Capacity-based deployment Start with CPU, accelerate with GPU and process in parallel as needed. Measure capacity with your own data during a pilot. YOUR INFRASTRUCTURE. YOUR CHOICE. ## Enterprise on-premises deployment We install Z-Mask on your organisation's own servers or private cloud. Contact our team to discuss your infrastructure, document volume and integration requirements. ### On-premises Offline masking, local models and your own policies. Start with CPU and add GPU capacity as needed. ### Private cloud Run in your own cloud account. Scale capacity horizontally with stateless services. ### SaaS Sign in, process your text or documents and manage results in one workspace. ### Plan your enterprise installation Discuss deployment scope, hardware requirements, integration and support with our team. Enterprise installations are quoted individually, separately from online subscriptions. [Contact us for on-premises deployment](mailto:info@zcntech.com?subject=Z-Mask%20Enterprise%20on-premises%20deployment)[info@zcntech.com](mailto:info@zcntech.com) FROM PILOT TO PRODUCTION ## Start with your own data. Define success criteria together: which details to hide, which context to preserve and how to handle your workload. 01 ### Pilot About 2 weeks Measure recognition quality and speed with sample data; define entity types and masking policies. 02 ### Integration About 2–4 weeks Connect the API to authentication, LLM, document and database workflows. 03 ### Go live About 1–2 weeks Finalize deployment, capacity and monitoring, then bring real workloads online. 04 ### Continuous improvement Throughout operation Improve policies with new data types and tags; review quality periodically. Timelines are indicative and will be agreed based on your scope and integration needs. [Let's discuss a pilot](mailto:info@zcntech.com) COMMON QUESTIONS ## A starting point for your workflow. ### Can I restore original values after masking? When text tagging and mapping are enabled, use the mapping to restore tags. Synthetic values, hashes and redaction do not use this restoration workflow. ### Can we define our own data types? Yes. Use a regular expression for customer numbers, a term list for project names or a description-based entity type for diagnoses. ### Can I review documents before sharing? Compare original and masked pages, remove masking boxes or add new ones manually, then regenerate the PDF. ### How are data and processing history handled? The workspace stores account-linked summaries, masked text and encrypted copies for newly archived PDF jobs. Account owners and authorized administrators can access records. Deleting a history entry does not necessarily delete archived files; contact us for archive deletion. Older jobs and original image inputs may lack copies. ### Can it run offline on-premises? On-premises deployment with local models is supported. Hardware, capacity and integration requirements are evaluated during a pilot. ## Mask personal data before sharing it. Start a pilot with your own data. [Contact us](mailto:info@zcntech.com)