Loading...

Securely Chat with
Sensitive PDF Documents.

CloakLM is a private AI desktop app with multi-pass PII redaction, project-based document management, and support for Claude, OpenAI, Gemini, or fully local models. Your PII never leaves your machine.

CloakLM Application Interface

Built for Document Privacy

Every feature designed around one principle: your PII never leaves your device.

Project Management

Organize Documents & Conversations

Group related PDFs into projects. Start multiple chats against the same document set, and pick exactly which docs provide context for each conversation.

  • Create, rename, and manage projects from the welcome screen
  • One-click to open a project or jump straight into a chat
  • Toggle individual documents in/out of LLM context per chat
Project management view showing document organization
Multi-Pass Redaction

Two AI Passes. Zero PII Leaks.

Pass 1 uses GLiNER + IBM Docling to scan locally in seconds. Pass 2 deploys a local Ollama LLM to catch what rule-based models miss — names in unusual formats, partial SSNs, addresses without standard suffixes.

  • GLiNER NER + regex patterns for structured PII (SSN, EIN, email, phone, address)
  • Optional deep scan with local Ollama model for contextual detection
  • Client-side safety net catches anything that slips through both passes
Document being anonymized with redaction badges
Review & Control

Inspect Every Redaction Before Sending

The Review Panel shows exactly what was redacted and by which pass. Accept or dismiss deep scan suggestions, manually redact additional text by selecting it, and see the raw anonymized output the LLM will receive.

  • Provenance badges: GLiNER (auto), Deep Scan (AI), Manual (you)
  • Select any text and click "Redact" to add manual redactions
  • Search the raw output to verify nothing was missed
Review panel showing redaction list and raw output
Secure Chat

The LLM Sees Placeholders. You See Real Names.

When the AI responds, CloakLM replaces [PERSON_1] with the real name on your screen — but the LLM never saw it. Switch between Claude, Gemini, OpenAI, or local Ollama models mid-conversation.

  • De-anonymization happens 100% on-device at render time
  • Provider badge on every response shows which model answered
  • Full conversation history with export to Markdown
Chat interface with de-anonymized AI responses
Bring Your Own Key

Your Keys, Your Models, Your Rules

Connect API keys for Claude, Gemini, or OpenAI — or run fully offline with Ollama. Keys are stored in an encrypted local store and connect directly to providers. No middleman server, ever.

  • Four providers: Anthropic Claude, Google Gemini, OpenAI, Ollama (local)
  • Deep Scan model picker auto-discovers installed Ollama models
  • Configurable document storage directory
Settings view with API key configuration

How CloakLM Secures Your Documents

A multi-layer pipeline ensures nothing slips through.

1

Upload & Organize

Drop PDFs into a quick chat or organize them into projects for ongoing work.

2

Multi-Pass Redaction

GLiNER + regex (instant), then optional local LLM deep scan for contextual PII.

3

Review & Approve

Inspect every redaction. Accept, dismiss, or manually add more before sending.

4

Secure Chat

Anonymized text goes to the LLM. Responses are de-anonymized on your device.