GDPR, EDPB 2026
Anonymous must hold up against AI. Up to €20m or 4% of turnover.
AI gets the work. Never the names.
Employees keep using ChatGPT, Claude, Gemini, Perplexity and Copilot. SealMatter replaces names, accounts and addresses before anything leaves, puts them back on their screen, and keeps a record your auditor can check without trusting anyone.
Settlement for Katharina Brenner, paid to DE44 5001 0517 5407 3249 31, confirmed by T. Osei.
It is already happening in your company.
- 67%of employees who use AI on work devices do it through personal accounts.Verizon Data Breach Investigations Report, May 2026
- 42%of German companies assume staff use AI through private accounts.Bitkom, October 2025
- 20%of organisations had a breach linked to shadow AI.IBM Cost of a Data Breach, 2025
The law already applies.
Criminal codes
§ 203 DE, Art. 321 CH: breaching professional secrecy can mean prison.
EU AI Act Art. 26
High-risk AI from 2 Dec 2027. Up to €15m or 3% of turnover.
Same work. Without the names.
Every person keeps one stand-in, in every document, every tool and every month. The AI can still reason about who did what. It just never learns who they are.
On your screen
Petra Halden from Halden Logistik GmbH asked for a refund to DE89 3704 0044 0532 0130 00. Katharina Brenner managed the account until June.
What the AI receives
Person G from Organisation 1 asked for a refund to IBAN 1. Person A managed the account until June.
Set up once. Then nobody thinks about it.
-
Deploy into your cloud
One click into your company's own Cloudflare. Your cloud, your keys, your bill.
-
Connect Google Drive
Every file in the watched folder gets a sealed twin written beside it, on its own.
-
Add your people list
Employees and clients, so names are known, not guessed.
Drop a file or paste a Drive link
Sealed in seconds
The AI answers on stand-ins
Names come back on your screen
Proof your auditor can check without asking us.
Every crossing is written to a hash-linked record. Once a day its fingerprint is published. Anyone can confirm a record exists and was not changed, in their own browser.
The record holds the team, the kinds of data protected and a fingerprint. It never holds what people typed, so it cannot become a tool for watching employees.
Message sealedSales2 people, 1 bank account
File sealedLegal3 people, 2 organisations
Names restored on screenLegal5 restored
Prompt textnot stored
Verified against the published root for today
Built for people who answer for client data.
Law, tax and audit firms
Professional secrecy stays intact while associates draft with AI.
Insurers and finance
Claims and account data never reach a model, and outsourcing audits get evidence.
HR and people teams
Employee files stay inside, and every use of AI on them leaves a record.
Your cloud. Your keys. We never see a name.
SealMatter runs in your company's own Cloudflare account, on Workers, D1 and R2. The identity map is encrypted with a key only you hold. Name detection for people not yet in your list runs on Workers AI in the same account.
- Where it runs
- Your company's own Cloudflare
- Who holds the key
- You
- What the AI sees
- Stand-ins only
- What the record keeps
- Kinds of data and fingerprints, never text
- Works with
- ChatGPT, Claude, Gemini, Perplexity, Copilot, Google Drive
Questions
Do my people have to change how they use AI?
No. They keep using ChatGPT, Claude, Gemini, Perplexity or Copilot in the browser. The extension seals identities before a message or file leaves, and puts the real names back on their screen.
Can SealMatter read what my employees ask?
No. The record stores which kinds of identity were protected and a fingerprint of what crossed. Prompt text is not stored. Revealing who a pseudonym is needs a secret held by your data protection officer, and the reveal itself is recorded.
What happens with PDFs and Word files?
Word files keep their formatting. PDFs are delivered to the AI as a text-faithful version, because the AI needs the words, not the layout. You keep the original.
What if a name is missed?
A second check reads the sealed text only and must quote any identity that survived. If it finds one, you get an alert, and adding it to your list fixes it everywhere.
Where does it run?
In your company's own Cloudflare account. The identity map and its keys never leave it.
See it on your own files.
Thirty minutes. We seal one of your documents on your own machine and show you what the AI receives. Please do not send client files through this form.