Presidio
Presidio is an open-source Python framework that detects and anonymizes personal data in text, images and structured data.
PRESIDIO.DATAPRIVACYSTACK.ORG ↗ DOCUMENTATION ↗ SOURCE CODE ↗
▸ WHAT IT DOES
Presidio is made of four modules. The analyzer finds personal data in text, such as names, locations, phone numbers, credit card numbers and social security numbers, using recognizers built on named entity recognition, regular expressions, rule-based logic and checksums, with surrounding context taken into account. The anonymizer then replaces, masks, redacts or encrypts what was found. The image redactor does the same for text in images, including DICOM medical images, through OCR, and the structured module handles tables and semi-structured data.
It is used in LLM applications to remove personal data from a prompt before it is sent to a model, and the docs include a sample that masks LLM calls through a LiteLLM proxy. Recognizers can be added for new entity types, languages and NLP models, and external detection models can be connected. It runs as Python packages, in PySpark, or as HTTP services from Docker images on Kubernetes.
▸ OWNER, LICENSE, HOSTING AND PRICE
| Fact | Value | Source and date checked |
|---|---|---|
| Owner | Data Privacy Stack, a community-governed open-source organization. Not owned by a company; originally created at Microsoft. | SOURCE ↗ 12 OCT 2026 |
| License | MIT. | SOURCE ↗ 12 OCT 2026 |
| Self-hosting | Yes, it only runs on your own infrastructure: as Python packages (Python 3.10 to 3.13) or as Docker containers. | SOURCE ↗ 12 OCT 2026 |
| Hosted regions | No hosted service. The project describes Python packages, Docker images and Kubernetes deployments that you run. | SOURCE ↗ 12 OCT 2026 |
| Free tier | The whole framework is free to use under the MIT license. | SOURCE ↗ 12 OCT 2026 |
| Pricing model | No charge. The project is not owned or operated by a commercial entity. | SOURCE ↗ 12 OCT 2026 |
| Lowest paid plan | None. No paid edition is described. | SOURCE ↗ 12 OCT 2026 |
Each value was read from the vendor's own page on the date shown. How listings are checked
▸ PRICING HISTORY
Presidio has no public pricing page for this site to watch.
▸ WHERE IT FITS
Teams that need one thing done under their own control: finding and masking personal data before text reaches a model or a log. It is MIT licensed, runs on your own infrastructure, and the recognizers and anonymization operators can be extended in Python.
▸ WHAT TO KNOW FIRST
It handles personal data only: there are no checks for prompt injection, topics or harmful content, and no audit trail. The project states there is no guarantee it will find all sensitive information, and that it is not a product of any company and comes with no warranty or SLA. Since moving out of Microsoft it is maintained by community volunteers.
▸ OTHER GUARDRAILS AND AUDIT TOOLS
-
Bedrock Guardrails
Amazon Bedrock Guardrails is a managed AWS service that filters prompts and model responses against content, topic and sensitive-data policies.