Presidio

https://presidio.dataprivacystack.org/

Open-source framework for detecting, redacting, masking and anonymizing PII in text, images and structured data, commonly used to scrub prompts and responses around LLMs. Originally a Microsoft project, it has transitioned to community ownership under Data Privacy Stack.

Active · Verified 2026-10-29 · fresh as of 2026-10-29 · 13 cited facts, 0 with a third-party source · 1 recorded change · Suggest a correction

At a glance

Type
Framework vendor fix
Tier
T3
Created
2018-05-04 repo fix
Latest release
last commit 2026-10-29 repo fix
License
MIT vendor fix
Pricing
searched not found fix
Funding
searched not found fix
Freshness
2026-10-29 fix
Layer
agent-infra repo fix
Licensing
open-source vendor fix
SDK languages
python registry fix

When to use

Optimised for: searched not found

Anti-fit: searched not found

Pros & cons

Pros

searched not found

Cons

searched not found

Claims & capabilities

This site uses cookies via Microsoft Clarity to understand how you use our documentation. ' + ' Learn more

Technical surface

API surface
searched not found
Backend storage
searched not found
Deployment
searched not found
Embedding model
searched not found
Multi-tenancy
searched not found
MCP
searched not found
A2A
searched not found
OpenTelemetry
searched not found

Similar systems

Other guardrails & ai security in the catalog, ranked by inbound references.

  • Azure AI Content Safety Prompt Shields T3

    Azure AI Content Safety API that detects user prompt attacks and indirect (document) prompt injection aimed at manipulating a model's behavior, alongside groundedness, protected-material and task-adherence checks.

  • Amazon Bedrock Guardrails T3

    Configurable safeguards that filter harmful text and image content, redact sensitive information, block denied topics and detect hallucinations. They apply consistently across foundation models in Amazon Bedrock and self-hosted or third-party models.

  • Google Cloud Model Armor T3

    Runtime security service that screens AI prompts, responses and agent interactions for prompt injection, jailbreaks, malicious URLs, sensitive-data leaks and harmful content, with adjustable confidence thresholds.

  • CrowdStrike Falcon Guardian (formerly Pangea AI Guard) T3

    AI detection and response product that discovers, governs and secures AI agents at runtime across endpoint, cloud and SaaS. It is built on Pangea, which CrowdStrike agreed to acquire in September 2025, and pangea.cloud's AI Guard page now redirects here.

  • Guardrails AI T3

    Open-source guardrails framework plus the Guardrails Hub of validators that detect policy violations, hallucinations and data leakage in LLM and agent outputs at runtime. Harvey announced its acquisition of Guardrails AI on Sep 8, 2026.

  • Prompt Security (SentinelOne) T3

    AI security platform that controls employee AI tool usage, protects homegrown AI apps and autonomous agents, and redacts sensitive data and enforces policy across AI services. It is now offered by SentinelOne, and prompt.security links to SentinelOne's product page.

Sources (12 cited facts, 0 third-party)

Each fact links to the page it came from; the badge says who published it (how to read sources).

What changed

Changes to this record's lifecycle, licence, release, pricing and hosting facts, from the catalog's git history. Subscribe (Atom)

  1. 2026-10-30 Added to the catalog #347

Related systems

References (2)

  • LiteLLM integrates with — Presidio samples include "PII Masking LLM calls using LiteLLM". (verified 2026-10-29)
  • OpenAI GPT family (GPT-5 / GPT-4o / o3 / o4) integrates with — Presidio samples include synthetic data generation with OpenAI. (verified 2026-10-29)

Referenced by (3)

  • Bifrost (Maxim AI) integrates with — Bifrost guardrails integrations include Microsoft Presidio. (verified 2026-10-29)
  • LiteLLM integrates with — LiteLLM docs have a Presidio PII/PHI masking guardrail page. (verified 2026-10-29)
  • NVIDIA NeMo Guardrails integrates with — NeMo Guardrails docs have a Presidio third-party guardrail page. (verified 2026-10-29)