Who this is for
Owner or office manager about to point an AI tool at a shared folder and unsure what is in it.
A folder of documents is about to be fed to a tool, and nobody knows whether it holds customer or staff details.
The result
A script you run locally lists the files that contain likely personal data, by path and type, never the values. Recall is measured on a planted synthetic set we make (a smoke test) and on a test folder you make, and reported by type. The script makes no network call, which is tested, and its report says plainly that it does not guarantee to find everything.
What is included
- A script for one operating system that you run on your own computer
- Folders of up to 50,000 files: text, Word, Excel, CSV and PDFs with a text layer
- Pattern types: email, phone, card-like and ID-like numbers, names and addresses
- A planted synthetic corpus of 200 files, 100 held back with at least 100 planted items of each pattern type, to measure recall
- A report of paths and types only
You receive
- The script and run steps
- The report format: paths and types, never values
- Recall by type on the held-back planted set
- The no-network test
- A page on what the finder cannot find
- Steps for your own planted-folder test
What is not included
- A guarantee that all personal data is found
- Redaction or deletion of anything
- Advice on whether you may process the data
- Image-only files and handwriting
- Sending any file or value anywhere
What we need from you first
- The kinds of files in the folder and roughly how many
- Which operating system you would run the script on
- No real records, personal data or credentials in the first enquiry
Never send passwords, keys, customer records or confidential code in the first enquiry. Secure handover is agreed after scoping.
How we check it is done
- On the 100 held-back planted files, at least 90 of 100 planted items of each of email, phone and number patterns are found (90 of 100 shows only that the true rate is at least 83% with 95% confidence); names and addresses are reported but not passed or failed. We plant these files ourselves, so this is a smoke test of the script. In a test folder you make, with 20 made-up email addresses and 20 made-up phone numbers that you place one to a file inside 20 files of the supported types for each type and do not tell us about, the report lists the file for at least 18 of 20 of each type (at least 71% with 95% confidence). The results describe the planted sets, not your folder.
- Run with the network blocked, the script gives the same report; a connection monitor shows no outbound connection.
- The report holds paths and file types, never values: a search of the report for the planted values finds none.
- The report's first line says it does not guarantee to find all personal data, and unreadable files are listed.
- Running the script does not change your files: checksums before and after are identical.
You inspect the recall table, the no-network test and a sample report, and sign off in writing. Payment follows sign-off.
When we would stop or decline
- You want a guarantee or a compliance certificate
- You want redaction done by the script
- Most files are images or handwriting
- You want your files sent to us to be scanned
Questions
Can I trust a clean report?
No. A clean report means the script found nothing it knows how to find. It is a list to look at, not an all-clear.
Do my files come to you?
No. We build the script on our own synthetic files. You run it.
Does the recall figure apply to my folder?
It applies to our planted test set. Your folder may differ, which is why the report is never an all-clear.
Price and terms
£149 · untested offer price. £149 after the agreed test passes on the held-back part and you sign off. No payment before sign-off.
This is a new service with no published client results. The price is a starting point we have not yet tested with buyers. Nothing is ordered or charged by the enquiry. The full specification is on the Synthetic Industry catalogue.