Four steps, all inside your perimeter
The model never sees the original value. What leaves is a token; what comes back is your data.
- 1
Detect
Every request passes a detector that validates by check digit: identity documents, IBAN, cards, Spanish and Andorran phone numbers, email and IP. Validating by check digit is what keeps false positives near zero.
- 2
Swap
The detected value is replaced by a reversible token before the request leaves your machine or your servers.
- 3
Block
Keys and credentials are not swapped: they are blocked and treated as an incident, because a key that has left is already compromised.
- 4
Restore
On the way back, each token becomes the original value again inside your environment. The round trip closes with no loss.
Strong on data that has a shape
What carries a check digit can be guaranteed. What does not is estimated — and we say so.
Structured identifiers
Identity documents, IBAN, cards, phone numbers, email and IP. Every match passes its check digit before being swapped, and the token recovers the exact value.
Secrets and credentials
AI and cloud provider keys, tokens, private keys and connection strings. There is no swapping here: there is blocking.
Names and places
The contextual layer covers what has no structural signature. It is the part that leans on language models, and the one that admits no absolute guarantee.
Your own vocabulary
Codenames, unannounced clients, internal labels: the confidential material no generic model can know about, declared per organisation.
What it does not do
Three limits we would rather you read here than discover later.
It does not guarantee free text
Identifiers with a check digit can be guaranteed. Names written in prose depend on language models, and there we claim nothing like a hundred per cent. The product page publishes its measured residual leak.
It does not replace your legal framework
It is a mechanism for reducing exposure. Your legal bases, your processing agreements and your record of activities remain yours.
Browser and server do not cover the same ground
The extension runs the deterministic layer on your machine. Names and free text are the licensed layer, which lives in the self-hosted component.
What you can get today
We are in early access. This is exactly what exists and what does not yet.
- In-browser playground
- Works today · no account · nothing you type leaves the page
- Browser extension
- Not yet published on the Chrome Web Store
- Self-hosted component
- Licensed, in early access
- Self-serve signup and payment
- Not available yet
“At BiVelio we believe companies need tools that let them organize processes, automate tasks and scale their operations. Our team is here to help you take the next step.”
Joan-Marc Fisa
Founder & CEO, BiVelio
From €89/month billed annually.