[ 01 / site plan ] · International Patent Pending

Your

You already know what AI would do for your week. You were told no because of the names in the data. Synthaveil swaps the names you select for realistic stand-ins before AI sees the copy. No generative AI makes the swap. Our patent-pending engine does, so the only AI that ever sees your work sees stand-ins. The work gets done. The no becomes yes.

[ 02 / how it works ]

AI stays outside the building.

The usual way: plug AI into your systems and let it go looking. Ours: AI never comes in. You hand it a copy with the names you select swapped for stand-ins. It does the work. The real names come back at the end. The same copy can go to any outside organisation, a supplier or a partner, without the names.

Step 1 · Today

AI plugged in, inside.

Wired to every floor, and leaking out through side doors nobody audits. This is what whoever said no is picturing.

Step 2 · Unplug

Every direct line comes off.

Nothing inside talks to AI on its own. Your data stays where it lives.

Step 3 · Move

AI goes outside, into its own space.

Not on your servers. Not reaching in. Waiting to be handed something.

Step 4 · One door

Stand-ins go out. Results come back.

The names you select are swapped on your side before the copy leaves. The copy goes through the door without them.

INSIDE — TRUSTEDOUTSIDE — UNTRUSTEDHQ — DATA ESTATE · SECTION A–AFINANCEHRCRMPROD DBSHADOW SAASVENDOR API[ ALERT ] AI INSIDE PERIMETERREACH: 4/4 FLOORS · CONNECTORS: 6EGRESS: UNCONTROLLEDAIRLOCK — AUDITED CHANNELSV-7F3A-91C4SV-3F19← RESULTSISOLATED COMPUTE[ OK ] AI OUTSIDE PERIMETERCHANNEL: 1/1 · MAPPING: STAYS WITH YOUEGRESS: VEILED TOKENS ONLYPERIMETER INTACTAIAGENT / LLM

Four steps

DWG 003 · scale NTS · illustrative

[ 03 / watch it happen ]

Twenty seconds. Same report, different people in it, and AI gets to work.

The totals still add up. The tone is still yours. The customer’s name stayed with you.

[ Film — Cover in Word ]Illustrated demo · fictional data · simplified workflow

[ 04 / what you get back ]

Hours back every week, and nobody has to hide how they did it.

  • 01The email drafted in a minute, not twenty.

    Paste the complaint. AI gets it without the names. Your afternoon comes back.

  • 02The report checked, and the sums still work.

    Stand-ins keep what the sums need, so nothing breaks and nothing gets retyped.

  • 03The yes, in writing.

    The data flow drawn, what leaves, what doesn’t, and where the key lives. No more AI on a personal phone under the desk.

[ 05 / five ways in ]

Send the Word doc or the spreadsheet to your AI vendor. The names you select stay behind.

Whichever chair you sit in, there’s a way in that fits the work you already do.

Everyday tools
  • CoverThe Word doc or the spreadsheet, the names you select swapped, ready to send.Word and Excel
  • AliasType the prompt. The names are swapped before you press enter.ChatGPT, Claude, Copilot
Your systems
  • CourierOne step in your n8n flow. The steps after it see stand-ins for the fields you map.The node for n8n automations
  • StationSits between your data source and an outside vendor, so the vendor gets stand-ins for the columns you mark.The corporate application
Your own product
  • LegendInside your own app, so your customers finally get to switch AI on.The SDK and the engine · self-hosted

[ 06 / for the person who said no ]

The line whoever said no can sign.

Forward this. It’s written for them.

Where

Runs where you choose: your own environment or ours.

We say which on every product. Legend stays in your environment when you run it yourself. Alias private mode sends only the matched names, not the message.
How

Stand-ins built from official statistics, not made-up names.

The sums survive. The key that turns them back stays with you, and we never hold a table of who became whom.
What makes the swap

No generative AI. No large language model reads your real data.

Some redaction tools use one AI model to protect you from another. Ours gives the same stand-in for the same input under the same settings, so you can run it twice and check.
Why they were right to worry

Amadeus: an €18m fine, and nobody hacked anything. Somebody shared.

Swapping the names narrows what a share like that can expose. It doesn’t decide whether you had permission to share.
  • International patent pending
  • Built by a team that shipped five AI products in travel

Read the Amadeus case and its sources →

[ 07 / FAQs ]

The questions people ask before they say yes.

Where does processing happen? What can be restored? What still needs your review?

What do I gain by pseudonymising first?

The AI provider or vendor gets a useful copy with no key or mapping back to your customers. With Synthaveil, a model can draft a response about a complaint without receiving the customer’s name. Review the remaining context for clues before you share; no particular regulatory outcome is promised.

Does my data have to leave my environment to reach you?

Not if you run Legend yourself: Synthaveil’s engine then works entirely inside your environment, even with no internet connection. Alias and Cover send only the details they find to the Synthaveil API, never the whole message or document. Each product page sets out where its data goes.

How is this different from a vault, a gateway, or a redaction library?

Synthaveil keeps data usable and holds no vault of real values. Vaults store the real values, gateways filter traffic on its way to a model, and redaction libraries leave the running to you. Compare a specific deployment, then test it with your own task.

See the full comparison table →

Browse all questions →