De-identify data at scale, without scrubbing what made it valuable.
Context-aware ML detects PII, PHI, PCI and corporate confidential data across 60+ entity types and 54 languages—then redacts, pseudonymizes, tokenizes or replaces it with synthetic data. All inside your own infrastructure.
0.2 - 7%
18/18
60+
0
Why it stalls
Manual review
Accurate until volume arrives. Then it is a backlog with a headcount line attached.
Regex and rule libraries
100+ patterns, a dedicated bug channel, and no way to catch what context reveals.
General-purpose cloud APIs
Built for breadth, not for identifiers. Between 13.8% and 46.5% of PII missed—and your data has to leave your environment to get there.
Built for real-world data
Detect what matters
Choose how it is de-identified
data that preserves the statistical shape of the dataset. Configure the method per entity type and per workflow—one rule for names, another for dates, another for account numbers.
Keep it useful, and defensible
Boehringer Ingelheim
Minutes
US, EU, China, Japan
Enterprise-wide
The knowledge existed. The compliance path didn't.
Boehringer Ingelheim's DUDE team built Smurf, a platform for answering medical
inquiries from doctors, patients, pharmacists and wholesalers. The questions
arrived as plain text and complex PDFs, dense with personal information, in
French, English, Spanish, German and more. Without proper anonymization, global
data protection compliance—US-Europe sharing above all—was impossible.
Limina cleared it.
Limina anonymizes at the source, before translation, inside Boehringer's own
architecture. What started as one use case became their enterprise Data
Foundation layer: downstream applications now consume pre-anonymized data and
never handle personal information directly. Response times fell from days to
minutes, and the US became one of the platform's largest data sources.

We couldn't have launched without proper anonymization. It was critical for compliance, especially to include US data.
Your data never leaves your environment.
One container in your VPC, your on-premises infrastructure, or a fully air-gapped environment. Two Docker commands. All processing runs in memory,
nothing is written to disk, and there is no outbound call to Limina. No third-party access. No data usage rights signed away. Ever.
Ready to de-identify your own data?
A 30-minute call with a Limina engineer or solutions expert. No deck. No
discovery script. We'll ask what you're working on, where you're stuck, and whether Limina is the right fit.
What you leave with
- What accuracy to expect on your data type
- Which de-identification method fits each entity you handle
- A deployment path for your environment, and a realistic timeline to production
De-Identification, Anonymization, Pseudonymization
What's the difference between de-identification, anonymization and pseudonymization?
De-identification is the umbrella: removing or replacing information that could identify a person. Anonymization is irreversible—the original values are gone. Pseudonymization is reversible under controlled conditions, because a consistent token stands in for each entity. Limina does all three, configurable per entity type, so you can anonymize a name and pseudonymize a patient ID in the same pass.
Will de-identified data still be useful for analytics and AI?
That's the point. Coreference resolution keeps every reference to the same person linked to one token, so longitudinal analysis survives. Relation extraction preserves the connections between entities. Synthetic replacement maintains the statistical shape of the dataset. You get data you can train on, share and analyze—not a field full of black boxes.
Does it work on unstructured data?
Unstructured data is where identifiers actually hide—inside sentences, abbreviated, misspelled, referred to obliquely. Limina handles free text, PDFs, DOCX, images, audio and DICOM across 15+ file formats, at 70,000 words per second on GPU.
Is there an API?
Limina is a REST API deployed as a container. No SDK required — if you can make an HTTP request, you can integrate it. All configuration happens at the request level, so there's no server admin and nothing hidden behind a UI. It plugs into Airflow, Kafka, Spark or any custom ETL layer.