# Presidio Guide

A source-qualified guide to when Presidio fits the locally deployable text redaction job.

Presidio is a local integration toolkit when the evaluator needs configurable recognizers and multiple replacement operators.

Site: Field Guides
Category: Software
Version: 2026-10-18.1
Published: 2026-10-18
Updated: 2026-10-18
Freshness: Checked 2026-10-18 against the cited sources. Official product claims, independent review/community signals, and evidence limits are reported; no hands-on benchmark, installation test, or privacy audit is claimed.
Tags: software, privacy, pii, redaction, presidio-text-redaction
Canonical: https://fieldguides.co/g/presidio-text-redaction
Markdown: https://fieldguides.co/g/presidio-text-redaction.md
Versioned Markdown: https://fieldguides.co/g/presidio-text-redaction/2026-10-18.1.md
JSON: https://fieldguides.co/api/guides/presidio-text-redaction

## Quick Read

- Verdict: Choose it for configurable recognizers and operators. - Presidio is a local integration toolkit for evaluators who need configurable recognizers and multiple replacement operators. Its anonymizer only acts on supplied detections.
- Workflow: Begin with PII identification followed by configurable anonymization. - The useful path is PII identification followed by configurable anonymization. Set up the smallest representative workflow first so you can inspect permissions, output, and control settings.
- Boundary: Check the limit before committing - The key constraint is Anonymizer acts on supplied detections; missing detections are not repaired by replacement. No source here proves a universal performance, privacy, or reliability outcome.

## Decision

**Choose Presidio when its documented boundary matches the job.**

Presidio is a local integration toolkit for evaluators who need configurable recognizers and multiple replacement operators. The cited sources describe it as a locally deployable redaction option. Choose it when configurable recognizers are the job. Its anonymizer only acts on supplied detections, so missing detections are not repaired by replacement.

## Setup

**Start by confirming deployment and the data path.**

Confirm this setup detail before you build a routine: Python module or self-hosted HTTP service/container. Then verify the processing boundary — Analyzer plus separate anonymizer operators — and keep the first sample low-risk until the account, device, or runtime behavior matches the source description.

## Workflow

**Workflow: PII identification followed by configurable anonymization.**

Use Presidio for PII identification followed by configurable anonymization. Customization is described as replace, mask, redact or encrypt; reversible operators need corresponding metadata and keys. Keep the workflow small enough to review its output and control settings; the cited sources do not establish a universal quality or speed result.

## Alternatives

**Compare Presidio by the constraint that decides the work.**

The five-guide table retains the current guide and four siblings in the locally deployable text redaction group. Values come from the cited source cells; an Unknown cell means the sources did not support a stronger statement.

| Guide | Workflow | Deployment | Input | Entry cost | Method | Customization | Limitation |
| --- | --- | --- | --- | --- | --- | --- | --- |
| OpenAI Privacy Filter | Model-based text redaction with a local CLI and Python API. | Local CPU or GPU; checkpoints downloaded if absent. | Text strings, files and pipes. | Open repository; compute and operational costs remain. | Token classification with span decoding. | Runtime precision/recall presets, evaluation and fine-tuning commands. | Validate detection on the target corpus; community scores change with matching criteria. |
| Presidio | PII identification followed by configurable anonymization. | Python module or self-hosted HTTP service/container. | Text and detected entity spans. | Open-source deployment; self-hosting/integration cost separate. | Analyzer plus separate anonymizer operators. | Replace, mask, redact or encrypt; reversible operators need corresponding metadata and keys. | Anonymizer acts on supplied detections; missing detections are not repaired by replacement. |
| scrubadub | Replace personally identifiable spans in free text. | Python package invoked inside local scripts. | Free-text strings. | Apache-2.0 software; dependency and operation costs separate. | Detectors identify spans; postprocessors control replacement. | Optional address, spaCy and Stanford detector packages; locale configuration. | Extra detector dependencies are needed for some entity types. |
| Limina on-premises | Detect and de-identify sensitive data; this comparison covers text. | Container in customer on-premises environment or VPC. | Text; product also supports documents, images and audio. | Enterprise custom pricing; free hosted Starter is not the local-deployment price. | Commercial entity detection and de-identification engine. | Enterprise model-version pinning and guided integration/tuning. | Local availability and commercial terms require vendor agreement. |
| Philter UCSF | Remove protected health information from clinical plain text. | Local Python command-line package. | Plain-text file or directory of clinical notes. | BSD-3-Clause software; integration and compute separate. | Configurable filtering pipeline with optional evaluation annotations. | Filter configuration and input/output paths. | Clinical-domain focus; general chat/email quality is not established. |

## Review signal

**Independent context for Presidio is bounded.**

The bounded cited sources contain no independent current-version review or community evaluation for Presidio. Its fit is consequently a documented capability read, with no tested ranking attached.

- No independent current-version review or community evaluation was included for Presidio among these cited sources.
- Treat official capability statements as the decision input and run your own representative check before a consequential rollout.

## Caveats

**Keep the source boundary visible while you decide.**

The current cited cost statement is: Open-source deployment; self-hosting/integration cost separate. Privacy or processing control is described as: Privacy controls are not fully described in the cited sources. The principal product boundary is: Anonymizer acts on supplied detections; missing detections are not repaired by replacement. These are source-qualified statements, not an installation result, benchmark, security audit, or retention guarantee.

- Installation compatibility has not been tested; confirm the current repository instructions for your environment.
- No local test, precision/recall result or independent current-version audit.

## First check

**Make the first adoption check specific to Presidio.**

Run a labeled sample from the target corpus through detection and replacement, then inspect misses, over-redaction, and logs before sending real data through the pipeline.

## Claim Table

| Where | Claim | Confidence | Source | Caveat |
| --- | --- | --- | --- | --- |
| Workflow | PII identification followed by configurable anonymization. | High | Data Privacy Stack (presidio-home) | Source-qualified product description; no independent performance test was run. |
| Setup | Python module or self-hosted HTTP service/container. | High | Data Privacy Stack (presidio-anonymizer) | Source-qualified product description; no independent performance test was run. |
| Setup | Text and detected entity spans. | High | Data Privacy Stack (presidio-anonymizer) | Source-qualified product description; no independent performance test was run. |
| Decision | Open-source deployment; self-hosting/integration cost separate. | High | Data Privacy Stack (presidio-home) | No paid service rate asserted. |
| Workflow | Analyzer plus separate anonymizer operators. | High | Data Privacy Stack (presidio-anonymizer) | Source-qualified product description; no independent performance test was run. |
| Workflow | Replace, mask, redact or encrypt; reversible operators need corresponding metadata and keys. | High | Data Privacy Stack (presidio-anonymizer) | Source-qualified product description; no independent performance test was run. |
| Caveats | Anonymizer acts on supplied detections; missing detections are not repaired by replacement. | Medium | Data Privacy Stack (presidio-anonymizer) | Architecture inference, not a measured failure rate. |

## Sources

- [Privacy Filter repository and CLI](https://github.com/openai/privacy-filter) - OpenAI; Official; accessed 2026-10-18
- [Presidio overview](https://presidio.dataprivacystack.org/) - Data Privacy Stack; Official; accessed 2026-10-18
- [Presidio Anonymizer](https://presidio.dataprivacystack.org/anonymizer/) - Data Privacy Stack; Official; accessed 2026-10-18
- [scrubadub README and license](https://github.com/LeapBeyond/scrubadub) - LeapBeyond; Official; accessed 2026-10-18
- [scrubadub stable documentation](https://scrubadub.readthedocs.io/en/stable/) - scrubadub maintainers; Official; accessed 2026-10-18
- [Pricing and deployment FAQ](https://www.getlimina.ai/en/pricing) - Limina; Official; accessed 2026-10-18
- [Philter UCSF README](https://github.com/BCHSI/philter-ucsf) - UCSF / BCHSI; Official; accessed 2026-10-18
- [GLiNER large-v2.1 vs Privacy Filter case study](https://github.com/gauravvij/pii-filter-model-eval) - Gaurav Vij / GitHub; Community; accessed 2026-10-18
- [A certified de-identification system for all clinical text documents](https://pmc.ncbi.nlm.nih.gov/articles/PMC10320112/) - UCSF authors / JAMIA Open; Review; accessed 2026-10-18

## Agent Retrieval Notes

- This Markdown is generated from the same structured guide package as the public HTML page.
- MCP tools return Markdown text by default to avoid high-token JSON envelopes.
- Agent site map: https://fieldguides.co/llms.txt