Runs inside your boundary
Philter runs in your own cloud account or data center, including networks with no internet access, and Philter Desktop works offline on a PC. Records never go to a third-party API.
Agencies, clerks, and records offices
Redact personal information from records before they are released, inside your own environment or on a single PC. FOIA expects each deletion to be marked with the exemption behind it, such as (b)(6) for personal privacy, at the place in the record where it was made when that is technically feasible.
For agencies and departments
Philter runs in your own cloud account or data center, including networks with no internet access, and Philter Desktop works offline on a PC. Records never go to a third-party API.
Automated detection proposes the redactions. In Philter Workspace, a reviewer accepts or overrides each one with a structured exemption code, such as (b)(6) or (b)(7)(C), and every decision is recorded with the reason behind it.
The software is open source under the Apache license. Your security team can read the code, and you can explain in writing how a redaction decision was made.
An agency or department
Redacts records through an API in your own cloud or data center, including air-gapped networks, launched from your cloud’s marketplace or installed on your own servers.
About Philter →A records or FOIA team
Reviewers accept or override each proposed redaction with an exemption code, and every decision is recorded. Built for high-security and air-gapped use.
About Philter Workspace →A clerk or records officer
Redact records, reports, and responses on a Windows PC, including scanned PDFs. Nothing is uploaded, and it works without an internet connection.
About Philter Desktop →Free, ready-to-use policies from the open source policy library. Download and load into your Philter instance.
Redact personal data and special-category data as defined by the EU General Data Protection Regulation (GDPR) from documents and records.
A balanced starting policy covering common PII types — names, contact info, government IDs, payment data — with no vertical-specific tuning.
Redact personal information and sensitive personal information as defined by the California Consumer Privacy Act (CCPA/CPRA) from consumer records.
Why most commercial PII redaction tools fail federal workloads, and how Philterd's self-hosted architecture maps to FedRAMP, CMMC, ITAR, and air-gapped needs.
A walkthrough for standing up Philter 3.4.2 and PhEye in a disconnected enclave: pinned images, offline transfer, and proving there is no egress.
When an auditor asks how a redaction decision was made, open source lets you answer with the code path. A decisive edge for government and healthcare buyers.