Unstructured data masking+ Synthetic documents

Mask your documents with the same rules as your databases, inside your environment

PDFs, scans, mailboxes, chats and notes hold the personal data that table masking never sees. Synthesized brings them under the same policy as your tables: found, replaced consistently and logged, or generated as synthetic documents from the start, so test copies, AI training sets and data rooms are clean end to end.

On the Synthesized platform, in production at banks, insurers and health companies. Runs in your cloud, on-premises or air-gapped.

Synthesized / Claims UK / Runs / run-2026-10-03Running in your VPCIllustration
Files
1,204 of 1,880
PDF, Office, mail, scans
Values treated
38,912
across 11 categories
People
4,107
one replacement each, in every file
Review queue
14
low-confidence values
Policy
Claims-UK v3
same rules as the claims tables
Files
Found
PDFclaim-note-88-1042.pdf14
EMLadjuster-reply-5521.eml9
TXTfnol-call-0193.txt22
SCANrepair-quote-scan.png6
DOCXpolicy-schedule-77.docx11Review
MSGbroker-thread-3310.msg…
ZIPclaim-photos-88-1042.zip–
claim-note-88-1042.pdf · page 1 of 3 14 values replaced · 0 left in place
Claim file noteClaim no. 88-1042
Policyholder
Jordan Hale
Date of birth
02/04/1981
Address
9 Mill Lane, York YO1 7HB
Phone
07700 900318

Mr Hale called on 3 October to report water damage from the flat above. Refund to the account ending 8830. Send updates to jordan.hale@example.net.

claim-note-88-1042.pdf · page 1 of 3 14 values found
Claim file noteClaim no. 88-1042
Policyholder
Maria Lopez
Date of birth
14/03/1981
Address
22 Elm Road, Leeds LS6 2AB
Phone
07700 900412

Ms Lopez called on 3 October to report water damage from the flat above. Refund to the account ending 4417. Send updates to maria.lopez@example.com.

Policy
Claims-UK v3
The same rules as the claims database
Person nameConsistent
Date of birthShift ±30 days
AddressReplace
PhoneKeep format
Account numberKeep format
EmailConsistent
Claim numberKeep
Approved by Data Protection, 12 Sep 2026. Every run is logged to the evidence pack.
The platform underneath, in production

Documents run on the same platform banks, insurers and health companies already trust with their data.

Documents and text use the same policies, the same engine and the same deployment as these results.

Banking · test data80%less time to provision test data, with compliant data generated through the API inside CI/CD.Deutsche BankCase studyHealth · masking20bn+rows masked and subsetted in hours, not weeks, with all manual configuration removed.Global HealthTech leaderCase study

Published results from database and synthetic data work on the Synthesized platform.

Start with your team

Three teams, one platform, one policy

Test data and SAP teams
Finish the job your database masking started
Your test refresh still copies the documents and notes that table masking never touched.
AI and ML teams
Realistic documents, no real people
Retrieval, fine-tuning and document AI need data that looks real and can be shared with every engineer.
Privacy, legal and data teams
Share, sell or release, with proof
Archives and records leave the company only after the people are taken out, and you can show how.

What works today

What you can mask and generate today

Two ways it's delivered. Available: in the product today, self-serve. Engineer-led: runs on the same platform, set up and run by our engineers inside your environment.

FormatMaskingSynthetic generationHow it's delivered
PDF, DOCX and PPTX documentsYesYes, from templatesEngineer-led
ZIP archives of documentsYes—Engineer-led
Scanned documentsYes, after OCR—Engineer-led
XMLEngineer-ledYes, schema-valid XML from an XSDEngineer-led
Mailboxes with attachments, Slack exportsYes, delivered with our engineersEngineer-ledEngineer-led
XLSX, CSV, HTML, plain text and calendar filesYes, delivered with our engineersCSV: yes, with keys kept consistent across filesEngineer-led
Text inside images (PNG, JPEG, and images embedded in documents)Yes, read with OCR and masked in place—Engineer-led
Free-text database fields, live chat and tickets, call transcripts, JSON and logsEngineer-ledEngineer-ledEngineer-led
In production today

Mixed archives de-identified in a single pass: Slack exports, mailboxes with attachments, spreadsheets, Word and PowerPoint files, text and scanned PDFs, HTML, calendar files and images, with spelling variants of each name resolved to one replacement across every file.

Runs in parallel
Files are processed independently, so larger archives get more workers, not longer queues.
Policy, not code
Changes are policy edits applied on the next run, with no engineering work.

By format

Eight kinds of unstructured data, and what each needs

How it works

Find it, treat it, then check what you missed

1Point it at filesBatches of PDF, DOCX or PPTX, or ZIP archives with an adapter for each file type inside. Scanned pages go through OCR first.
2DetectPatterns for values with a known shape, such as emails and card numbers. Context for values whose meaning depends on the words around them. Local models where they apply.
3Treat each categoryTokenize, replace with a synthetic value, redact or retain, chosen per category. A contact needs a consistent token; a free-text aside can simply go.
4Check the outputCompare a labelled sample with what should have been found. Exit codes flag any document that fails, so a pipeline stops instead of shipping it.

How it compares

Built to make test data, not just to find it

When personal data turns up in files, teams usually reach for one of three things. Each does part of the job.

What you needSynthesizedUnstructured data maskingRedaction toolsData-security scannersIn-house scripts
Finds personal data in files and text
Patterns, context and local models, checked against a labelled sample of your files
Often page by page, with a person reviewing
Built to find and report it
Only the patterns someone wrote
Replaces it consistently
One realistic replacement per person, in every file of a run
Blacks values out, so nothing is replaced
Reports findings and leaves the files as they are
Only with a mapping someone builds and maintains
Keeps documents usable
Layout, formats and relationships kept, so parsers, tests and models still work
Black boxes break extraction, search and tests
The files still contain the data
Formats and layouts often break
Runs in your environment
Your cloud, on-premises or air-gapped
Varies; many are hosted or desktop tools
Varies by product
Yes, and you own every fix
Evidence for every run
What was found, how it was treated and what was checked, per run
A redaction log per document
Findings reports, not proof of treatment
Whatever someone remembers to log

Yes Partly or it depends NoCategories, not named products. Ask any tool the same five questions.

Where it runs

Your documents stay in your environment

Extraction, detection and reconstruction run where you configure them. Nothing about this needs your files to visit our cloud.

Tokens before anything leaves
When Governor is used, real values are swapped for tokens before the transformation table reaches it.
The token map stays with you
The mapping from token to real value is kept locally, under your access and retention controls.
Reports you can review
Batch manifests show what was treated. They can contain original values, so they are protected like the source files.

Consistency

One person, one replacement, in every file of a run

Tests break when a ticket names a customer the system has never heard of. So each person gets one replacement, used in every document, email and note in the run.

Database rowAvailable
customers.name: Maria Lopez Ava Okafor
customers.email: a.okafor@example.net
PDF statementEngineer-led
Account holder: Maria Lopez Ava Okafor
Same replacement in every file of the batch
Email threadEngineer-led
From: Maria Lopez Ava Okafor
“Hi, my card ending 0000…”

Files can be grouped so they share replacements across a whole archive.

Built for regulated teams

What your security and privacy teams will ask

The answers, before they ask.

  • Runs in your environment. On-premises, in your cloud or air-gapped. Your documents never visit ours.
  • One policy for tables and documents. The same rules, consistent replacements, reviewed and approved once.
  • Evidence for every run. What the policy covered, what it touched and what got through, ready for audit.
  • You choose per category. Tokenize, replace with a synthetic value, redact or keep. Redacted PDFs are rebuilt as images, so nothing hides under a black box.
  • Checked, not assumed. Output is re-scanned and scored against labelled samples before it is released.

Free resources

Start without talking to anyone

Questions about unstructured data

What is unstructured data masking?

Unstructured data masking finds the personal and confidential data inside documents, emails, chats, call transcripts and free text and replaces it consistently, under the same policy you use for your databases, so the files stay usable for testing, AI and sharing. Unlike column masking, the values have to be found first, because they can sit anywhere in the text. When no real file should be used at all, Synthesized generates synthetic documents instead.

Which file types does Synthesized support today?

PDF, Word and PowerPoint files including scans, ZIP archives, mailboxes with attachments, Slack exports, spreadsheets, HTML, calendar files and the text inside images. Masking database tables and generating synthetic CSV sets are self-serve in the product; document support is delivered engineer-led on the same platform.

Does my data leave my environment?

Extraction, detection and reconstruction run in the processing environment you configure. When Governor is used, real values are replaced with tokens before the transformation table reaches it, and the token-to-value mapping stays local.

Is the same person masked the same way in every file?

Within a run, yes: each detected value gets one replacement everywhere it appears, and files can be grouped to share replacements across an archive. Nicknames and first-name-only references are worth checking with a labelled sample.

How is this different from a redaction tool or a data-security scanner?

Redaction tools black values out, which breaks documents for testing and AI. Data-security scanners find and report personal data but leave the files unchanged. Synthesized finds the data, replaces it with consistent, realistic values under the same policy as your databases, keeps the documents usable, runs inside your environment and records what it did on every run.

How is this different from a PII detection API?

Those tools detect personal data in the text you send them. Synthesized is built for test data: it keeps documents usable, sits alongside the databases you already mask, generates synthetic documents, and checks output against labelled samples. Many teams will use a detector and a test data platform together.

Can masked text be recovered from a PDF?

No. Masked values are replaced in the file itself, not covered over. You choose the output: image-based PDFs with no text layer at all, or searchable PDFs whose text layer carries the replacement values.

Prove it on 50 of your documents in 48 hours

One document type, inside your environment. A masked or synthetic set, an entity report and a readout, for a fixed fee credited when you go ahead.