Claude security directory

Redacta

Medium risk

Redacta replaces patient identifiers and personal data (NHS numbers with Modulus-11 validation, names, dates of birth, MRNs, emails, phones, postcodes, plus general PII like URLs, IPs, payment cards and account numbers) with labelled tokens, so text can be safely shared or processed by AI. It includes a HIPAA Safe Harbor mode and is fully reversible via a token map. All processing happens locally in the server process — it makes no network calls and stores nothing.

Security assessment

Plutonium assessed this web connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: The connector processes raw text that may include highly sensitive identifiers (e.g., NHS numbers, DOBs, MRNs, contact details) in order to detect and tokenize them.
  • Can change or update your information: Redaction and reinstatement transform the input text by replacing identifiers with tokens and optionally restoring the original values, which can alter data if misused or applied to the wrong content.

Available capabilities

This add-on exposes 3 tools or capabilities.

  • redact
  • reinstate
  • self_check

The interactive security report will load automatically.