Ref. MS-2026-001 · FADP · personal data
Maijin Shield is a Swiss service that anonymises Word, Excel, PowerPoint, PDF and XML documents before you hand them to an AI such as ChatGPT, Claude or Copilot, then puts the real values back into the document the AI returns. The text is analysed in Switzerland with Infomaniak AI Tools. Built for SMEs that use AI without exposing their clients' personal data.
NewOr simply forward the emailMs Lara Fontanaz, born on 12.03.1987 (AHV 756.9217.0769.85), living at Rue des Alpes 14, 1201 Geneva, is being treated for a generalised anxiety disorder. Contact: lara.fontanaz@exemple.ch, 022 345 67 89.
56 seconds, no sound: the risk when patient data ends up in an AI, then the same file anonymised, worked on by the AI and returned with its real values.
Drop in a short Word, Excel, PowerPoint, PDF or XML document: you get the same document back, anonymised, ready for ChatGPT, then you get the real values back in what the AI returns. The document is never stored; the mapping table is kept encrypted, in memory only, until 1 hour after the last document.
Paste a text
An email, an excerpt from Google Docs or Word: the formatting is kept.
Demo without an account: short documents (about 3 pages), 3 at a time at most. As in the workspace, the text of your document is sent to Infomaniak's AI, in Switzerland: preferably use a fictitious or test document. The document is never stored; the mapping table is kept encrypted, in memory only, until 1 hour after your last document, linked to a technical cookie, so that you can try getting the real values back. Details in the privacy policy.
Drop the document (Word, Excel, PowerPoint, PDF or XML) that the AI gave back to you, or paste its reply. We automatically find the original document and put the real data back in place of the labels.
Shield works on your Word, Excel, PowerPoint, PDF and XML files: you get the same document back, layout included. Technically, Maijin Shield pseudonymises: the AI only sees labels such as [PERSON_1], and only the person who anonymised the document can recover its real values.
A Word, Excel, PowerPoint, PDF or XML file as it is, or a pasted email with its formatting. Shield spots names, addresses, numbers (AHV, patient record, GLN, IP addresses…) and health data.
Progress report
Patient: Lara Fontanaz
Born on 12.03.1987 · AHV 756.9217.0769.85
Address: Rue des Alpes 14, 1201 Geneva
Is being treated for a generalised anxiety disorder. Contact: lara.fontanaz@exemple.ch, 022 345 67 89.
Every data point found is highlighted. One click to leave one in plain text, a selection to mask a missed word.
Progress report
Patient: Lara Fontanaz
Born on 12.03.1987 · AHV 756.9217.0769.85
Address: Rue des Alpes 14, 1201 Geneva
Is being treated for a generalised anxiety disorder. Contact: lara.fontanaz@exemple.ch, 022 345 67 89.
You download the same document, with labels in place of the data. ChatGPT, Claude or Copilot works on it without seeing the masked data.
Progress report
Patient: [PERSON_1]
Born on [DATE_1] · AHV [AHV_1]
Address: [ADDRESS_1]
Is being treated for a [HEALTH_1]. Contact: [EMAIL_1], [PHONE_1].
Upload the document the AI gave back to you: Shield recognises the original and puts each real value back in its place. No need to get them back? Anonymise permanently: no table is kept.
Follow-up letter
Ms Lara Fontanaz
Rue des Alpes 14, 1201 Geneva
Following our last meeting, we suggest adapting the care for your generalised anxiety disorder. We will call you on 022 345 67 89 to arrange an appointment.
About 3 minutes, no sound, with captions: the real Maijin Shield interface on a fictitious document, from the progress note to the AI's summary with the real values. The ChatGPT scenes are a reconstruction.
Every account has its own drop-off address. Forward the email containing the document to it: the anonymised version lands back in your inbox a minute or two later. Then forward the AI's reply to the same address: the real values come back too.
From You · To k7x2p9qmab@depot.maijinshield.ch
Fwd: Progress report
a minute or two
From Maijin Shield · To You
Re: Fwd: Progress report
7 data points masked: [PERSON_1] [AHV_1] [HEALTH_1]…
progress_report_anonymised.docxFrom You · To k7x2p9qmab@depot.maijinshield.ch
Fwd: Letter written by the AI
a few seconds
From Maijin Shield · To You
Re: Fwd: Letter written by the AI
7 real values put back: Ms Lara Fontanaz…
follow_up_letter_reworked.docxYour usual email program is enough: Outlook, Gmail, on a computer or a phone.
A document sent from another address is not processed. The reply always goes to you.
The email received is processed at Infomaniak, in Switzerland, then permanently deleted, without going to the bin.
Documents join your history: restore them by email or in the tool.
The application runs on an Infomaniak VPS in Geneva; Infomaniak is a Swiss provider. No American host, no multi-region fallback.
For detection, the text of your document is sent to Infomaniak AI Tools, in Swiss data centres. According to Infomaniak: no retention, no training on your documents.
Your document is processed in memory. The original document is never stored. Only its anonymised version and the mapping table are stored, encrypted, for 90 days, then deleted; they can be deleted at any time.
What the Swiss data protection act asks of a service like Maijin Shield, what we actually do, and the public page where you can check it.
The six key points in 47 seconds, no sound.
When you entrust us with a document, we process it on your behalf. The data processing agreement is part of the terms: it applies to every subscription, with nothing for you to do.
Read the agreementInfomaniak server in Geneva, Infomaniak AI in Switzerland, emails sent from Switzerland. Only Stripe, for payment, is outside Switzerland (Ireland, United States), and it never receives a document. By email, the document also passes through your own mailbox.
The sub-processorsEvery category of data is masked by default. The original document is read in memory and never kept. The AI you then give it to (ChatGPT, Claude, Copilot) only sees labels.
How a document travelsOnly the mapping table and the anonymised version are kept, encrypted, for 90 days, then erased automatically. You can erase them sooner, at any time.
What is keptAES-256-GCM encryption with a key kept outside the database, firewall, server access by key only, no password, daily checked backups and an encrypted copy off the server, in Switzerland.
EncryptionAnalysis, creation, restoration, erasure: every operation on a document is recorded in an append-only audit log, which never contains the content of the document. It is kept for 13 months.
The audit logDownload your data from your Settings, or delete your account and your tables. Any other request (access, correction, erasure) is answered within 30 days.
Your rightsIf a data security breach affects data processed on your behalf, we notify you no later than 48 hours after becoming aware of it, with what you need for any notification of your own to the FDPIC.
Section 11 of the agreementThe FADP applies to you too: you remain responsible for your data and for how you use AI. Maijin Shield greatly reduces what the AI sees, but it does not replace reviewing the preview, your obligations towards the people concerned, or legal advice.
The limits, honestlyCreate your team and invite your colleagues by email: they sign in without a password. The plan is shared, and everyone gets back the real values of their own documents.
An administrator decides, for the whole team, which data to mask. By default, everything is: leave in plain text only what the AI needs.
Try the demo above first, no account needed, then request a demo: we suggest the plan that fits the size of your team.
For your team
Accounts are opened by our team. Request a demo: we show you the tool on your own documents, then open your team's workspace with the plan that fits its size (deployment on your domain, payment by invoice, FADP support on request).