About piisafe.eu
A website PII scanner that stores no scan data
A PII scan is an automated check for personal data that a website shows to the public. Personal data is defined as any information relating to an identified or identifiable natural person, in Article 4(1) of Regulation (EU) 2016/679 — the GDPR, in force across the EU since 25 May 2018. Article 5(1)(c) asks for data minimisation and Article 5(1)(e) for storage limitation, which is the pair a no-storage design answers directly. Article 83(5) sets the upper fine band at €20 million or 4% of worldwide annual turnover; Article 83(4) sets the lower band at €10 million or 2%. Article 44 restricts transfers outside the EU, and in 2020 the Court of Justice invalidated the EU-US Privacy Shield in Case C-311/18 — which is why processing location is a compliance question here, not a marketing one.
The operating numbers behind that claim are fixed: one scan covers at most 1,000 pages, each call to the detection API takes at most 50,000 characters, 20 new scans per hour are available from one IP address, and a sweep deletes a finished session 35 minutes after the scan ends.
No-Storage Architecture
Scan results are never stored — they live in memory only and are automatically deleted within 35 minutes of your scan ending
No Server Storage
Results exist only in server memory during processing and are polled by your browser. No database writes. Ever.
Nothing to Look Up Afterwards
Scan content is never logged and never written to a database, and finished sessions are automatically swept from memory within 35 minutes — nothing to query, nothing to breach.
German Infrastructure
All processing in Germany (Hetzner). No US cloud. No third-country transfers. True GDPR Article 44 compliance.
"Scan data that is never stored cannot leak, cannot be subpoenaed, and cannot be breached. That is the whole design."
Our Values
The principles that guide everything we build
Transparency
Open detection methodology. Clear pricing and limitations. No hidden data collection. What you see is what you get—no black boxes, no surprises.
Quality
Deterministic regex recognisers for formatted identifiers (IBANs, card numbers, national IDs), complemented by an NLP model for names, organisations and locations. Format matches are reproducible for compliance audits. Regular pattern updates to stay current with evolving threats.
Accessibility
Free tool, no account needed - bring your own anonym.legal API key. Simple 4-step wizard interface. Privacy protection should be available to everyone.
Reliability
German infrastructure, GDPR-aligned processing, and a zero-storage design—scan results are never persisted, so there is nothing to retain or lose.
Technology Philosophy
How we approach PII detection differently
🎯 Deterministic Detection
Formatted identifiers—IBANs, card numbers, national IDs—are matched by exact pattern recognisers. Names, organisations and locations need context, so an NLP recogniser handles those.
Same input = Same output, every time. Pattern matches are exact, and the NLP recogniser runs with fixed settings and no sampling, so repeated scans of the same page agree. That is what compliance documentation and audit trails need.
🇩🇪 German Infrastructure
All data processing occurs in Germany (EU). Full GDPR Article 44 compliance with no third-country transfers.
EU data residency means your scans never leave European jurisdiction. No reliance on US cloud providers or international data flows.
🔐 Privacy by Design
Zero-storage architecture: no scan data stored on servers. Results held in memory during your session only. Optional export for local archiving.
No-retention approach—scan results are processed in memory and never persisted, and finished sessions are automatically deleted within 35 minutes, so shortly after your scan they no longer exist on our infrastructure. That is the technical design, verifiable in the deployed code.
Our Product Ecosystem
piisafe.eu is part of a comprehensive PII anonymization ecosystem developed by curta.solutions
piisafe.eu
Free Website PII Scanner
Entry point to PII detection. Scan websites for 58 entity types with no registration required. Perfect for compliance audits, pre-launch testing, and vendor assessment.
Start Free Scan →anonym.legal
Entry-Level Cloud Platform
58 entity types with MCP Server for AI tools and Chrome extension. €3/month entry point with document upload and batch processing. Perfect for small teams and freelancers.
Learn More →anonymize.solutions
Umbrella Marketing Site
Comprehensive overview of all deployment models: cloud, on-premise, and hybrid. Explore enterprise solutions with custom SLAs and dedicated infrastructure.
Explore Solutions →anonym.plus
Offline Desktop App
200+ entity types with zero network connectivity. Ed25519 licensing, complete air-gap operation, and local-only processing. Perfect for sensitive environments.
Learn More →anonym.community
Research & Knowledge Base
Curated analysis of 100 privacy communities, 1,460 pain points distilled into 98 transistors. Free research resource for privacy advocates and developers.
Browse Research →About the Team
piisafe.eu is developed by curta.solutions, a German consulting firm specializing in PII anonymization with 27+ years of experience in data privacy, compliance automation, and secure software architecture.
Our mission is to make enterprise-grade privacy protection accessible to everyone—from individual developers to Fortune 500 companies. We believe that data privacy should not be a luxury reserved for those who can afford expensive consultants.
Certifications & Compliance
Enterprise-grade security and regulatory compliance
ISO 27001 Hosting
Hosted in ISO 27001-certified data centres (Hetzner, Germany).
GDPR Article 25
Data Protection by Design and Default. Privacy built into every layer of our architecture.
EU Data Residency
All processing in Germany (Hetzner, Nuremberg). No third-country transfers. Full GDPR Article 44 compliance.
No Storage
Memory-only processing: scan data is never written to a database, disk or log.
HIPAA Ready
Healthcare-specific entity detection. PHI patterns including MRNs, insurance IDs, and medical codes.
PCI-DSS
Payment Card Industry compliance. Detects credit card numbers, SWIFT codes and cardholder names.
27+ years of PII anonymization expertise • 58 entity types • 48 languages • 14 countries with dedicated IDs
Ready to Scan Your Website?
Start your free scan now. No registration, no credit card required.
Start Free Scan