Local-first privacy guard that anonymizes documents before sending them to frontier LLMs and restores original text locally, supporting GDPR-compliant sharing workflows.