Skip to content
On this page
Getting started

Overview

Omit is a fully offline PII redaction suite for Windows. Every capability, detection, redaction, transcription, and summaries, runs on the machine in front of you. This guide covers installing, running your first redaction, and rolling Omit out to a fleet.

i

Everything here works on a network-isolated machine. If a step needs the internet, we say so explicitly, and nothing in the core workflow does.

Install and activate

Download the signed installer and run it. No network connection is required at any point. Activation is a signed license key you paste in; Omit verifies it locally with Ed25519 and never contacts a server.

$ omit activate --key OMIT-SUITE-9F2A-7C41-E0B3
# verifying signature locally...
Activated, Full Suite, offline

Verify offline

Disconnect the network and run a redaction end to end: Omit reads the file, runs detection, applies the policy, and writes the output, all without a live connection. If any step required the network, it would fail here instead.

Redact a file

Drag a file, text, email, CSV, Excel, PDF, or a scanned image, onto Omit Redact. It scans on-device, groups every detection by type, and waits for your review. Approve, reject a false positive, or let it run automatically. A new _redacted copy is written next to the source; the original is never modified.

01
Drop
02
Review
03
Redact

Bulk mode

Point Redact at a folder instead of a single file and it walks every supported document inside, applying the same policy and writing each output next to its source, with one combined audit report for the whole batch.

Redaction operators

Each of roughly 25 entity types maps to one operator, so you control exactly how every kind of PII is handled.

Operator
Result
Blackbox
Text removed, covered by a bar.
Label
Replaced with a type tag, for example PERSON.
Pseudonymize
Consistent reversible token via the vault.
Mask or hash
Partial mask, or a one-way hash.

The reversible vault

Pseudonymized values are sealed in an encrypted vault (AES-256-GCM, keys derived with Argon2id and protected by Windows DPAPI). Paste an anonymized output back into Omit and, with the correct key, pull the original values out. A wrong key returns opaque data, never plaintext.

Audit reports

Every run writes an HTML audit report listing what was detected and how each item was handled, redact, anonymize, or de-anonymize, each timestamped. Hand it to your compliance team or attach it to a procurement review.

Admin policy

Fleet admins set a ceiling policy that intersects with each user's local settings, so a rollout can restrict which operators and entity types are available without touching every machine by hand.

Offline licensing

License keys are signed offline and verified locally with Ed25519. There is no license server to reach, no seat check-in, and no telemetry tied to activation.