What is MultiMind, in plain language
When a company sends text to an AI service (ChatGPT, Claude, and similar), three things can go wrong:- Sensitive data leaks. Someone pastes a customer’s email address, social security number, or credit card into a prompt, and it leaves the building.
- Nobody can prove what happened. If a regulator or auditor asks “did personal data ever get sent to the AI vendor?”, there is no record.
- Costs run away. Every AI call costs money, and without a meter nobody notices until the invoice arrives.
- a guard — it spots sensitive data (emails, phone numbers, ID numbers, credit cards) and masks it before it is sent out, or blocks the request entirely;
- an audit trail — a tamper-evident log file recording what was caught and when, without ever storing the sensitive values themselves;
- a budget — a spending meter and a hard ceiling, so AI costs cannot silently run away.
Step 0: Open a terminal
The terminal is a window where you type commands instead of clicking buttons.- Mac: press Cmd+Space, type
Terminal, press Enter. - Windows: press the Windows key, type
PowerShell, press Enter.
Step 1: Install Python
Python is the language MultiMind is written in. Check whether you already have it — paste this into the terminal and press Enter:Python 3.11.6 (any number from 3.10 up), you are done with this step. If you get an error instead, download Python from python.org/downloads and run the installer, accepting the defaults. On Windows, tick the box that says “Add Python to PATH” during installation, then close and reopen the terminal.
Step 2: Install MultiMind
Paste this and press Enter:audit, backend, chat, compliance, config, dashboard, models, serve). If multimind is reported as “command not found”, close and reopen the terminal and try again.
Step 3: Scan a file for sensitive data
This is the guard, usable directly from the terminal — no AI service, no API key, no internet connection needed. First try it on a sentence:- Type — what kind of sensitive data was found (email, phone, ssn, credit_card, iban, api_key, and more). “PII” stands for personally identifiable information.
- Start / End — the character positions in the text, so the finding can be located exactly.
- Match — the actual text that was flagged.
No PII found. The command also signals the result invisibly: it finishes with status “failure” when PII is found, which lets automated systems (for example, a check that runs before every document upload) refuse to proceed.
To scan a whole file — say a document called customer_notes.txt in your Downloads folder — and also see what a cleaned-up version would look like:
--redact mask part prints the text again with every finding replaced by a label like [EMAIL] or [CREDIT_CARD] — this is exactly what the guard sends to the AI vendor instead of the real values.
Step 4: Understand the audit trail
When developers wire the guard into an application, every event is appended to an audit file (usually named something likecompliance_audit.jsonl). Each line is one event. A real line looks like this:
- timestamp — when it happened, in universal time.
- direction —
inputmeans data on its way to the AI vendor;outputmeans data coming back. - pii_types / count — what was found and how many of each. Here: one email and one social security number.
- strategy — what was done about it.
maskmeans the values were replaced with labels before sending. - blocked —
truemeans the request was refused entirely (used for the most sensitive types, like credit cards). - tags — a short fingerprint (a hash) of each value. The same email always produces the same fingerprint, so an auditor can tell “this is the same person’s email appearing in 14 requests” — without the file ever containing the email itself.
Step 5: Run a private AI on your own computer
This step runs an AI model entirely on your machine. Nothing you type is sent to any company. It uses Docker, a tool that runs pre-packaged software.- Install Docker Desktop from docker.com and open it once so it is running (you will see a whale icon).
- Download MultiMind’s stack definition and start it. Paste these four commands one at a time:
- Talk to it:
"content" part — that is the AI’s answer. localhost means “this computer”: the request never left your machine.
- Prefer clicking to typing? Open http://localhost:8000/docs in your web browser. That page (called Swagger) lists everything the service can do and lets you try each function with a “Try it out” button.
- When you are done, shut everything down with:
What you have seen
- The guard catching sensitive data in text and files, with no internet needed (Step 3).
- The audit trail that proves, without exposing anything, what was caught (Step 4).
- A complete AI service running privately on your own computer (Step 5).
Where to go next
- Hand your developers the quickstart — the same features, wired into code, in five minutes.
- The compliance guide covers the full GDPR/HIPAA compliance module.
- Questions? Join the Discord community — non-technical questions are welcome.
