The PII Tokenizer is a purpose-built application WalkerNash Development engineered in-house for one job: protecting privileged client information. It runs on the lawyer's own computer, strips client identifiers before any AI tool sees them, holds the token-to-PII map locally, and restores the names only on your machine. Free with every Kingsfield seat, or a one-time $249 purchase for firms that want the privacy gate on its own.
The Tokenizer is not a cloud service with a local agent. It is a dedicated application, built in-house by WalkerNash Development, that opens and closes the privilege boundary on your own computer. Nothing about your client crosses the wire in the clear.
A 31-pattern, fail-closed scan runs over every outbound payload — names, SSN, EIN, account numbers, DOB, email, phone, addresses. Each identifier is replaced with a stable token before the text reaches your AI tool or the judge.
31-pattern · fail-closedThe token-to-PII map — the only thing that can turn [CLIENT_1] back into a real name — is written to your own disk and never uploaded. No cloud service, including Kingsfield, ever receives it.
Local-only · never uploadedBefore anything leaves, the egress gate shows you the exact outbound payload and waits. Nothing is sent until you confirm. This is the backstop for free-typed PII the patterns might miss — the lawyer's own last look.
Lawyer-confirmed egressWhen the work product comes back, the names are restored on your machine, from your local map. The cloud holds no map, so detokenization can only ever happen here. The restored identity never appears in any cloud record.
Local detok · no cloud mapThe Tokenizer has to be the first thing the text passes through on its way out. Put it in front of whichever AI tool you already use, and the cloud sees tokens from the very first call.
Type your matter the way you always have. The Tokenizer sits on your machine between your draft and anything that leaves it.
The scan strips identifiers, the egress gate shows you the payload, and only tokens cross the wire — to your generator, and on to the Kingsfield judge.
The finished work returns as tokens and is detokenized on your machine. Your client's confidences were never in the clear anywhere but your own disk.
The Tokenizer protects content that passes through it. Client PII sent to any AI tool upstream of the Tokenizer egresses to that tool before the Tokenizer sees it — tokenizing downstream does not cure a disclosure already made. Tokenization is offered as a discipline the firm must affirmatively elect and keep in protected status. The firm remains the sole party liable for the protection of client PII.
A privacy tool that oversells itself is a liability. Here is the boundary, lawyer to lawyer, so you can place the Tokenizer correctly in your own workflow.
If a tool received raw PII before the Tokenizer ran, that disclosure already happened. The Tokenizer has to sit at the first point of egress; placed downstream of something that already saw the names, it protects nothing about that earlier call.
This is a discipline, not an ambient guarantee. You elect it per matter and keep it in protected status. A switch that is off, or a workflow that routes around it, leaves the client exposed exactly as if the Tokenizer were not installed.
The scan is fail-closed across 31 categories, which means it errs toward holding rather than sending. But no automated scan catches every free-typed identifier. That is exactly why the egress gate exists: your confirm is the real backstop, not the regex.
Tokenizing a name does nothing about a fabricated citation. Privilege and hallucination are two different trust gaps. The Tokenizer closes the first. Closing the second is the Kingsfield judge's job — which is why the two are built to run together.
The Tokenizer is free with every Kingsfield seat, because it is the discipline that keeps client data off the cloud — we would rather you never have the switch turned off. For firms that want the privacy gate on its own, it is a one-time purchase: buy the application, own it, updates included. No subscription.
The PII Tokenizer on its own, for firms that want the privacy gate without the judge — yet. Buy the application once and own it. A WalkerNash-built privilege tool: 31-pattern fail-closed scan, lawyer-confirmed egress gate, local-only map and detokenization, cross-platform. Not a subscription — one payment, and update maintenance for the application is included.
Buy the Tokenizer →A reliable in-house PII gate is weeks of a developer's time plus the tooling bill, and then you maintain it yourself. $249, once, is less than that — built, tested, and kept current for you.
Planning to run the judge too? Don't buy the Tokenizer — every $99 Kingsfield seat already includes it free. Standalone is for firms that want the privacy gate alone. Same app either way.
WalkerNash Development engineered the Tokenizer in-house for a single purpose: keeping privileged client information off the cloud. It runs on the lawyer's own computer, strips PII before egress, holds the token-to-PII map locally, and detokenizes on a clean pass. Whether you take it free with a Kingsfield seat or buy it standalone, the application and its guarantees are identical — the only difference is whether the judge runs behind it.
Take the Tokenizer free with a Kingsfield seat, or license it on its own. Either way, the map never leaves your machine.
Get the Tokenizer