A privacy release engine that runs on your own servers
huereo turns a sensitive data export into a copy prepared for one stated purpose, with what was removed and checked on record.
huereo runs on your own servers, offline, as one container image. It finds personal data in tables, documents and scans, changes it according to a written Privacy Contract, checks the result a second time with an independent verifier, and writes a Passport that records what was done and why.
Pt Anna K. seen at Riverside Clinic on 02/08/2026. Husband Tom called about the claim.
A synthetic record, to show the workflow. Not a benchmark.
One container image. No data, and no information about your data, leaves the machine.
CSV to SQL dumps, Word, email, PDF and scanned images, each released in its own format.
Replace names, phones, Aadhaar and PAN with realistic stand-ins of the same kind and shape, the same for the same person, drawn from ranges no one is issued.
Identifiers from India, the US, the UK and Europe, and from countries across Asia, the Middle East, Africa and Latin America, with their checksums where one exists.
Only a release that passes every check is written to the shareable folder.
01 Who it is for
Typical shares it prepares
02 The problem it solves
Someone deletes columns by hand, misses the ID number in a notes field or the phone number inside a scanned letter, and nobody can show afterwards what was shared or what was removed. Under data protection law, that risk sits with the organisation that shares the data.
huereo replaces the manual step with a release that is planned from a contract, executed the same way every time, verified independently and recorded.
03 How a release works
Step 1 of 8
Every supported file is read in bounded memory: each sheet of a workbook, each page of a PDF, each part of an email. A file whose name holds personal data (for example PAN_ABCPS1234K.png) is released under a neutral name such as renamed-0001.png.
Produces
04 What it finds
Identifiers matched with their official structure and checksum where one exists: Luhn for cards, ISO 13616 for IBAN, Verhoeff for Aadhaar. Names, places and organisations from huereo’s own model. India is the launch focus, with the deepest coverage.
Names, places and organisations
05 Working with us
On this website: sector, what you share and with whom, data types, rough monthly volume, where it would run, timeline. The form never asks for data.
We release a sample loan book, a scanned KYC document and an email live, and walk through the Passport.
You run huereo assess on one of your own files and get a one-page report of what is sensitive and what to do, plus a drafted contract.
We help install the image, write the contract with your privacy team and DPO, and release one real data share. We run huereo review with you to measure detection on your own data.
One licence file per deployment, sized by volume. Updates arrive as signed files; support works from the support bundle, which holds no data values.
Your data never comes to us at any of them.
06 Questions
No. The engine runs offline in your environment and blocks outbound connections. Support works from a bundle that holds no data values, and review scores hold counts only, and the console’s Overview shows counts, names and statuses, never a data value.
It stops. A field it could not classify, a language it does not cover, a legal decision or a low-confidence OCR page makes the release UNRESOLVED or is reported for review. Nothing unscanned is released as clean. A file with a header and no rows stops with a reason, as an input problem.
Within one release, if the contract allows it: keyed tokens are the same across its files. Across releases only when the contract allows cross-release linking.
Yes. The plan lists every action with its reasons, and the Passport summarises them in plain language for the DPO.
huereo verify detects it and names the file.
As a signed file. You validate and import it, activate it when ready, and can roll back with one command. A file not signed by us is refused.
Yes. Scans and scanned PDF pages are read with OCR in English and Hindi, personal words are painted out of the images, and the released pages are read back by OCR to check.
The contract names it. Packs for India’s DPDP Act, US HIPAA de-identification and the EU GDPR map requirements to checks. They are technical mappings, not legal advice, and the legal decisions stay with your DPO.
Run huereo on one of your own files on a one-hour call, or start a 30-day pilot on your server ($149, credited in full to your plan). Or write to hello@supermerco.com.