[ PROD-04 / product ]
Legend
Legend is the Synthaveil engine and the SDK for your own applications. Run it as a library, sidecar or container in your environment, and choose a treatment for each field.
For engineers integrating pseudonymisation into a service, pipeline or platform.
Status8 September 2026 · Available to early-access organisations under agreement. Contact us to discuss the SDK and deployment requirements.
LEG-01
It runs where your data already is
A library, a sidecar or a container inside your perimeter, called by your own code. When you run it yourself, plaintext stays in your environment.
In a self-hosted deployment, your code calls the engine where your data already sits. The identifying values do not need to be sent to a hosted Synthaveil endpoint for that processing.
What stays your decision
Hosted API and portal modes have different data flows. Confirm the mode when planning your integration.
LEG-02
Per-field policy, not one big switch
Each field gets the treatment you choose, from a simple token to a realistic stand-in.
Policy is written per field and travels with the job. A reference number can stay a reference number; a name becomes a believable name; an age stays a believable age. The decision is recorded, so a year later somebody can read why that field was treated that way.
What stays your decision
Per-field power is per-field responsibility. A policy that leaves a column unclassified leaves it untouched, and the engine will not invent a rule you did not write.
LEG-03
No table of who became whom
Stand-ins stay consistent within the scope you set, and Synthaveil keeps no copy of who became whom.
Within the scope you set, the same value gets the same stand-in, so your joins still work. Change the key to start a new scope. A new scope does not erase retained records or remove clues in unchanged fields.
What stays your decision
Some other products can restore real values on your side, using information only you hold. Check each product page for how restoration works.
Legend is a pseudonymisation control. It does not make your data anonymous, it does not make your processing lawful, and it will not tell you which of your columns are personal — the full schedule, with the limit on every property, is on the specifications page.