Deterministic masking
Consistent tokens preserve useful correlations between repeated values.
Open source · Windows · Local-first
Data Mask Studio DMS
Local, open-source data preparation and masking for Windows.
Work with sensitive datasets while preserving analytical correlations without directly exposing original values. Processing and controlled restoration remain in your local environment.
- Local processing
- No telemetry
- Controlled restoration
What is DMS?
Practical protection for sensitive datasets
Data Mask Studio is a local-first Windows desktop application for data preparation and anonymization. Deterministic data masking keeps repeated values correlated during analysis, with controlled restoration of CSV data and codes in local HTML.
Original information is kept in an encrypted local vault. Reversibility is controlled through that vault and its protected keys, rather than being a property exposed by each token.
Main features
Focused tools for local data workflows
Prepare, mask, restore and verify datasets without sending their contents to an external service.
Encrypted local vault
Mappings and original representations remain encrypted on the local machine.
Data preparation
Preserve, mask or exclude columns; normalize values, rename headers and compose columns. Reuse profiles for batch processing.
HTML restoration
Restore known codes in local HTML files while preserving document markup.
Portable encrypted backups
Protect vault, key and profile backups with a password for controlled recovery.
Integrity verification
Audit the local vault and identify structural or authentication problems safely.
Maintenance tools
Use diagnostics, temporary-file cleanup and controlled vault compaction.
Local-first by design
No telemetry and no automatic synchronization of sensitive information.
How it works
A controlled path from data to analysis
Sensitive data
Data Mask Studio
Masked dataset
Analysis
Controlled restoration
Identifiers remain consistent when generated with the same prefix and cryptographic environment, enabling correlation across records and files. Restoration requires access to the corresponding encrypted local vault.
Security & privacy
Local controls with explicit cryptographic roles
DMS provides deterministic data masking with controlled restoration through an encrypted local vault. It does not claim that individual tokens are reversible or guarantee irreversible anonymization.
Deterministic identifiers
Tokens derive from keyed cryptographic authentication, incorporating the configured prefix and original value.
Authenticated vault protection
Original information stored in the vault is encrypted and authenticated against unauthorized changes.
Protected local keys
Local keys are protected for the Windows user. Processing stays local, with no telemetry or automatic sensitive-data sync.
Open source
GNU General Public License v3.0 only
SPDX: GPL-3.0-only. Third-party components remain under their respective licenses.
Author