What your IT team and your DPO or privacy officer need to know to approve Nonimo.
Nonimo finds and redacts personal data on each person’s computer, before the text reaches ChatGPT, Claude or Gemini. In the app, the text being analysed does not pass through our servers. And because protection does not depend on them, it keeps redacting offline or if our servers are unavailable.
So it can put your real details back into the reply, the app keeps the current conversation on the computer itself, encrypted with the operating system’s own protection. A conversation can no longer be opened after thirty days without use. The terms each person adds to their vocabulary are also kept encrypted on their computer, and never reach us. As with any software, we recommend full-disk encryption.
Once a day, the app sends us usage counts: how much it is used, which features, versions and platform. Never the text, the redacted details or the vocabulary. Paid licences can also check that they are still active. We explain this in our privacy policy.
Nonimo runs on your own computers: it comes into your environment as a product, not as a service delivered from outside, and that usually shortens a security assessment. For your own applications connected to AI, Nonimo Gateway also installs on your own servers.
On request, with no form to fill in:
No cookies and no analytics tools, with a strict content security policy. Payments are processed by Paddle.
Have a security question, or want to review Nonimo with your team? Write to hello@nonimo.ai. If you find a vulnerability, write to the same address: we will not take legal action against anyone who reports a vulnerability to us in good faith and gives us reasonable time to fix it.
Last reviewed: 24 October 2026.