Anonymize Customer CSV Data Before Sharing with External AI

Data Governance policies and Data Processing Agreements (DPAs) typically prohibit sharing personally identifiable information with third-party services — regardless of whether an AI vendor claims not to train on your data. When marketing teams upload raw customer exports containing email addresses, phone numbers, and physical addresses to ChatGPT or Claude for segmentation analysis, they create an undocumented data transfer that compliance teams cannot audit or control. The distinction matters: Anonymization irreversibly removes the ability to re-identify individuals (falling outside GDPR scope), while Pseudonymization replaces identifiers with reversible tokens (still regulated). This workflow applies one-way hashing to email and phone columns, redacts address fields entirely, and generalizes dates of birth into age ranges — producing a dataset that retains statistical patterns for AI analysis while eliminating direct identifiers. All processing occurs in your browser; the original file never transits through any server.