Detects and redacts personally identifiable information (PII) in user-typed text on-device, replacing sensitive values with stable placeholders before any data leaves the browser. Uses a small quantized ONNX token-classification model plus deterministic recognizers for structured identifiers, and applies a policy-driven keep-set for coarse geography.