Palena PseudonymizerKeep real names away from the LLM

An HTTP guardrail for the LiteLLM proxy. It swaps real people and company names for consistent fictional ones before the model sees them, then restores the originals in the response — streaming included.

Get started

How it works

Bidirectional & consistent

"Alice Johnson" becomes "Jordan Avery" on the way in and back to "Alice Johnson" on the way out — stable across every turn of a conversation.

Text, streaming & images

Pseudonymizes chat text, reverses streamed responses without leaking partial names, and redacts PII in image attachments.

Fail-closed by design

If detection or the mapping store is unreachable on the way to the model, the request is blocked — never silently leaked.

Deploy in one command

A Helm chart ships the service plus optional Redis and Presidio, with organization detection on by default.