arXiv:2608.18260cs.AIcs.CL2026-08中稿 · WIPE-OUT 2026, 2nd…

Redakto让LLM处理文本前自动隐藏隐私信息,兼顾安全与可用性。

Redakto - The Incognito Tab for LLMs

论文配图:Redakto - The Incognito Tab for LLMs
图 1 · 摘自论文原文
  • 通过红描与伪匿名化技术,自动去除文本中的个人身份信息。
  • 在法律和医疗文本上测试,去敏后文本保留原有实用性能。
  • 支持网页端、API和模型协议接口,本地部署易用且开源。

大型语言模型(LLMs)正广泛应用于日常场景,但其使用中的隐私保护问题日益突出,尤其在欧盟新法规背景下。如何确保输入LLM的文本不包含个人身份信息(PII)成为创新与应用落地的关键障碍。本文提出 extbf{Redakto},一款用于在文本输入LLM或下游处理前进行匿名化的工具。该工具提供业界领先的红描与伪匿名功能,可通过网页应用、REST API及模型上下文协议(MCP)钩子被终端用户、开发者和研究人员便捷调用。系统完全开源,仅需少量算力,可轻松部署于本地硬件。为更准确评估匿名化效果,我们在法律与医疗领域的文本上开展了全面实证评估,涵盖隐私性与实用性。结果表明,不同红描策略生成的文本在实用性上与原始文本相当,证明使用Redakto进行数据匿名化不会对所研究任务造成显著负面影响。

原文摘要 · Abstract (English)

Large Language Models (LLMs) are being increasingly used in everyday applications. A major challenge in the context of LLMs or Artificial Intelligence (AI) in general is to ensure privacy when using them, meaning that personally identifiable information (PII) is removed from any text that enters an LLM. These challenges have become more urgent with novel EU legislation. Uncertainty around LLM usage with respect to privacy concerns in EU countries can be a major blocker for the speed of innovation and transfer from research to applications. Here we present \textbf{Redakto}, a tool that can be used for anonymizing text prior to feeding it to an LLM or other downstream text processing. We provide state-of-the-art functionalities for both redaction of PII but also when used for pseudonymization. These functionalities are exposed such that they can easily be used by end-users, through the Redakto web application, and by developers and researchers, via REST APIs and model context protocol (MCP) hooks. The implementation is fully open source, requires modest compute resources, and can be readily deployed on local hardware. In contrast to prior work and in order to better assess the quality of the anonymized texts, we conduct extensive empirical evaluations on textual data from legal and medical domain with respect to both privacy and utility of the redacted texts. Our empirical results demonstrate that the texts anonymized with different redaction strategies achieve utility scores on par with the original texts, suggesting that anonymization with Redakto can be used for LLM tasks without substantial negative impact for the tasks we explored.

隐私保护LLM工具数据匿名化

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。