zeropii
GDPR-first · The AI firewall for Dutch organisations

The filter between your team and AI: personal data never leaves your organisation

zeropii masks personal data before it reaches an AI model, and keeps an audit trail as proof for your DPO and the regulator (exportable as CSV or JSON). You run it at your own organisation, so the data stays inside. What it recognises (BSN, IBAN, KvK, names) is the mechanism underneath.

0
Personal data to AI models
BSN · IBAN · KvK
names detected
Any AI model
one filter in between

Built for organisations that handle sensitive data: legal, healthcare, finance, HR and government.

One filter, in front of every major AI model

ChatGPTChatGPTClaudeClaudeGeminiGeminiMistralMistralInternal model

One pasted BSN in ChatGPT can be a data breach.

Your team already uses AI, with client names, case files and numbers in it. Every prompt with personal data that goes to an external model can lead to a GDPR incident or notifiable data breach. zeropii reduces that risk technically and verifiably. AI isn't the problem. The problem is that nothing sits between your team and the model.

38%

of employees who use AI share sensitive company information with AI tools, without their employer's knowledge.

Source: National Cybersecurity Alliance & CybSafe, Oh, Behave! 2024–2025

37839

data breaches reported to the Dutch Data Protection Authority in 2024, nearly 50% more than the year before. Human error is the leading cause.

Source: Dutch Data Protection Authority (AP), Data Breach Report 2024

zeropii is that checkpoint: a filter that strips personal data before it leaves.

How it works

The filter sits in between

Every prompt goes through zeropii first. Personal data out, then to the model, and the full answer back.

1

Employee types

"Send invoice to Jan de Vries, BSN 123456782"

zeropii filters

"Send invoice to ████████, BSN ████████"

AI answers safely

The answer comes back through zeropii with the real names. The model never saw them.

What zeropii stands on

Three pillars

Detect, mask and make it provable. That's what an AI firewall should do.

01

Detection

Recognises Dutch personal data: BSN, IBAN, KvK, licence plates, names and addresses, plus your own organisation-specific patterns.

02

Masking

Replaces personal data with numbered tokens before the LLM call and puts them back in the answer automatically.

03

Provability

Dashboard with an audit trail: see and export what was blocked, for your own accountability.

The AI firewall for Dutch organisations

Four things that genuinely matter.

Recognises what matters

BSN, IBAN, KvK, licence plates, names and addresses, plus your own patterns, tuned to the Dutch context.

Sits in front of any AI model

Claude, ChatGPT, Gemini or your own internal model. zeropii is the filter in between.

Insight & control

Dashboard with an exportable audit trail: see what was blocked and record it.

Deployed at your place

zeropii runs as a proxy at or for your organisation, so personal data stays inside.

Protection tailored to you

Standard protection for all common personal data, plus your own rules.

Standard

BSN, IBAN, KvK numbers
Names, addresses, postcodes
Email addresses and phone numbers
Licence plates and credit cards
And more…

Per organisation

Add your own organisation-specific patterns
Internal customer numbers, project codes, employee numbers
Configurable per organisation
Architecture

Where does zeropii run?

The proxy runs where you want it. We're honest about what happens where, no small print.

Recommended

At your organisation

zeropii runs as a proxy on your own environment or a dedicated VPS. Personal data never leaves your organisation; only the cleaned prompt goes to the AI model.

Fully internal

Combine zeropii with a local AI model, and even the cleaned prompt stays within your own infrastructure.

The online demo runs on our environment to show the concept; in production zeropii runs at your place.

With or without a filter

Without a filter
With zeropii
Personal data in prompts
goes to the external model
masked before sending
GDPR risk
possible notifiable breach
personal data stays inside
Model choice
every model = its own risk
any model, one filter in between
Where the data sits
in the AI tool's cloud
at your organisation
Proof for your DPO/regulator
none
exportable audit trail (CSV/JSON)

Who it's for

For organisations that want to use AI without giving up personal data: legal, healthcare, finance, HR and the public sector.

Proxy rollout at your organisation, on your own environment or a VPS, on request.

What is zeropii?

zeropii is an AI firewall for Dutch organisations: a proxy filter that sits between employees and AI models. It intercepts personal data such as BSN, IBAN, KvK numbers and names in prompts before they reach models like ChatGPT, Claude or Gemini, and restores them in the answer. Deployed at the organisation, personal data stays inside. zeropii is made by Artificial Studio.

How do you make sure everyone goes through it?

An IT manager's biggest worry: employees just use chatgpt.com. The Dutch Data Protection Authority's own advice: block free AI tools and offer a safe alternative. That is exactly what zeropii is. So you don't have to ban AI. You switch it on, with the data staying inside and a record of what happens.

What does it cost?

Per employee below what you pay for Copilot or ChatGPT Business, with a fixed floor per organisation.

Shadow-AI baseline

on request

measures what leaks to external AI today

Start

from €295/mo

up to ~25 employees, shared EU environment

Team

€595–795/mo

up to ~100 employees

Own environment

on request

dedicated VPS or on-prem, data never leaves your own walls

All amounts excl. VAT. Final price and quota on request.

Frequently asked questions

PII is short for "Personally Identifiable Information": personal data that identifies someone, such as a name, BSN, IBAN or address. "zeropii" means zero PII: no personal data to the AI model.

No. "zero-PII" (or "zero PII") is a general data-architecture concept: tokenising or removing personal data. zeropii (one word, lowercase) is a brand name — a product by Artificial Studio that filters personal data out of AI prompts before they reach ChatGPT, Claude, Gemini or an internal model.

No personal data. The prompt passes through the zeropii filter first; only the text without personal data reaches the model.

As a proxy at or for your organisation (your own environment or a dedicated VPS), so personal data never leaves your organisation.

Yes, model-agnostic. zeropii sits as a filter in front of any model; your organisation chooses which one.

BSN, IBAN, KvK, licence plates, names, addresses and postcodes, plus your own organisation-specific patterns.

zeropii is a technical measure that helps you comply with GDPR. Compliance is a property of the organisation in its role, not of a tool on its own.

Yes, you add custom patterns per organisation, such as internal customer numbers, project codes, employee numbers and more.

See the filter in action

Type a text with personal data and see what zeropii detects and masks before it goes to an AI model.