AI Connector guide

Your AI assistant reads your documents, anonymised on your machine and checked by you.

The AI Connector links Tacitum to Claude Desktop and Codex Desktop. You ask the assistant for an analysis; Tacitum anonymises the document on your computer, you check what goes out, and only the masked text is sent. You then read the answer back in clear, on your own machine. No more copy-and-paste or attachment: the assistant asks Tacitum for the document.

✓ Included in the free trial Then €69 for one year (no VAT applicable, art. 293 B CGI) ✓ No subscription, no auto-renewal ✓ Adds to the Tacitum licence Claude Desktop · Codex Desktop · Windows
The screenshots below show Tacitum's French interface, and Claude Desktop and Codex Desktop in French too — Tacitum also ships in English (chosen in the direct installer, changed any time in Settings). The workflow is identical.

The principle: the assistant only receives the anonymised text you have checked

Without the AI Connector, you anonymise a file in Tacitum, drop it into your assistant, then paste its answer into "Recover my values". With the AI Connector, the assistant asks Tacitum for the document itself, and every sensitive step stays on your computer. In this guide, the examples name Claude; with Codex, only the plug-in step differs (step 2 b): the other steps and windows are the same, and Tacitum shows "Codex" there.

You ask

In Claude Desktop or Codex Desktop: "Analyse my contract with Tacitum". Tacitum opens its picker: you choose the file or, if you asked for a folder, the whole folder.

On your machine

Tacitum anonymises, you check

100% local analysis, then the usual review window. Nothing leaves before you click "Confirm and send to Claude".

On your machine

The assistant receives the masked text

Only the anonymised text is sent: [NOM-A2H7KQ] replaces the person, everywhere and in every document. The assistant analyses, summarises, drafts.

With the assistant

You read it back in clear

"Show me your answer in clear with Tacitum": a local window puts your real values back in. Nothing goes back to the assistant.

On your machine
Tacitum's two promises remain intact. What the assistant receives contains no mapping table: it is irreversible for whoever receives it. You, on the other hand, keep Restorable mode's encrypted mapping on your machine, so you can read the answer back with the real names. It is never sent.

Before you start

Three things you need

  • Tacitum, up to date, on this machine. The free trial is enough to try the AI Connector: its 10 conversions also work with the assistant. To keep using it afterwards, the AI Connector adds to a Tacitum licence (€79, one-time payment). If "AI Connector…" does not appear in Tacitum's left column, your version predates the AI Connector: install the update offered at launch.
  • Claude Desktop (Claude's desktop app, by Anthropic) or Codex Desktop (Codex's desktop app, by OpenAI), for Windows, installed and signed in to your account. These are the two supported assistants; you can plug in both.
  • The AI Connector: nothing to buy during the free trial. After that, €69 for one year (no VAT applicable, art. 293 B CGI), bought directly from Tacitum (step 1 below), or included in the Tacitum + AI Connector bundle (€148) when you buy the licence on the website. No subscription: when it ends, nothing is charged; you decide whether or not to extend.
The AI Connector sits in Tacitum's left column, under "AI Connector…", between "My permanent lists…" and "Settings…". Every step in this guide starts from that window.

Step 1 — Get the AI Connector

On the free trial? Nothing to buy: the "AI Connector" window shows that the connector can be used within your free conversions. Go straight to step 2 — Connect your assistant.

Open the "AI Connector" window

In Tacitum, click AI Connector… in the left column. The window recalls how it works and shows the status of your access. Until you have bought it, it offers "Get the AI Connector…".

Tacitum's AI Connector window before purchase: Get the AI Connector button, Refresh button, Connect Tacitum to Claude and Connect Tacitum to Codex buttons (French interface shown)
The "AI Connector" window before purchase.

Buy one year of access

Click "Get the AI Connector…". Tacitum shows the offer, loaded from the licence server: €69 (no VAT applicable, art. 293 B CGI) for one year, with the end date, one year after payment (see the terms of sale, article 8). The invoice is sent to your licence's e-mail address; you can enter another one, which then becomes your licence's contact address.

Tick the box by which you request immediate access and acknowledge that you lose your right of withdrawal (terms of sale, article 8), then click "Pay online": secure payment opens in your browser (Mollie: no bank details go through Tacitum). Leave the Tacitum window open: it updates by itself as soon as the payment is confirmed. If you closed it or confirmation is slow to arrive, click Refresh.

AI Connector purchase window: one-year offer at €69, immediate-access request box, invoice e-mail address, Pay online button (French interface shown)
You buy inside Tacitum; you pay in your browser.
No subscription. Access runs for one year (365 days), then stops by itself: nothing is charged without a new purchase. Tacitum reminds you in the app, and by e-mail at your licence's address, 30 days and 7 days before the end date then on expiry, with a personal extension link. Extending early loses nothing: the year you buy is added to the end of the current period.

Check: "active until…"

Back in Tacitum, the window shows "AI Connector active until …" in green. If you extended from the link in the e-mail, or if the status has not refreshed, click Refresh: Tacitum queries the licence server with the same data as the licence check (the key and the technical fingerprint of your Windows session), never a document.

AI Connector window after purchase: 'AI Connector active' notice with the end date, Extend for one year button, Connect Tacitum to Claude and Connect Tacitum to Codex buttons (French interface shown)
Access active: all that's left is to plug in your assistant.

Step 2 — Plug in your assistant

The "AI Connector" window has two buttons: "Connect Tacitum to Claude…" and "Connect Tacitum to Codex…". Each builds a package specific to your installation (it points to your Tacitum, which carries your licence and your settings); no assistant configuration file is changed behind your back. Follow the part that applies to you, or both.

2 a Claude Desktop

"Connect Tacitum to Claude…"

Tacitum creates the extension for Claude Desktop, the file Tacitum.mcpb, saved in Documents\Tacitum. Two cases, depending on your Claude Desktop installation:

  • Claude Desktop opens straight onto its extension installation window: confirm.
  • Otherwise, Windows File Explorer opens with the Tacitum.mcpb file selected. In Claude Desktop, open Settings → Extensions and drag the file into the drop zone for .MCPB or .DXT files.
Claude Desktop, Settings → Extensions, before installation: no extension installed yet and the drop zone for .MCPB or .DXT files (French interface)
Claude Desktop, Settings → Extensions: this is where the Tacitum.mcpb file goes.

Confirm the installation

Claude shows the "Tacitum" extension card with its tools, and a red warning: the extension will have access to your computer, and the information about its developer has not been verified by Anthropic. That is the message shown for an extension installed from a file, outside Anthropic's directory. Tacitum has just created this file on your machine; the program it contains (TacitumMCP.exe) is signed by Tacitum's publisher. Click Install.

Tacitum extension installation window in Claude Desktop: description, Anthropic warning about unverified extensions, requirements met, list of tools, Install button (French interface)
The Tacitum extension card in Claude Desktop. The warning is the standard message for a local extension.

"Tacitum" then appears in Settings → Extensions, among the extensions installed on your computer. Depending on your Claude Desktop version, the + menu of the input box also offers the Tacitum shortcuts, whose names are in French: "Analyser un document anonymisé" (analyse an anonymised document), "Ajouter un texte anonymisé" (add an anonymised text), "Relire la réponse en clair" (read the answer back in clear), "Relire et corriger un document Word" (review and correct a Word document), "Rédiger un document Word en clair" (write a Word document in clear).

Claude Desktop, Settings → Extensions after installation: Tacitum listed among the extensions installed on your computer, with a Configure button (French interface)
The extension installed. Claude can now ask Tacitum for documents.

2 b Codex Desktop

"Connect Tacitum to Codex…"

Tacitum creates the Tacitum plugin package for Codex, the file Tacitum-Codex.zip, saved in Documents\Tacitum and shown in File Explorer. Then:

  1. Extract it completely (right-click → "Extract All…").
  2. In the extracted folder, double-click Installer.cmd: the plugin is added to your personal Codex plugin catalogue. Nothing else is changed in Codex.
  3. Restart Codex Desktop.
  4. In Codex, open the Customize panel ("Personnaliser" in the French interface), then Plugins, Personal tab: "Tacitum" ("Documents protégés localement", locally protected documents) appears under "Created by you". Click + to install it.
Codex Desktop, Customize → Plugins, Personal tab: the Tacitum plugin 'Documents protégés localement' listed under 'Created by you', with the + button to install it (French interface)
Codex Desktop, Customize → Plugins → Personal: the Tacitum plugin, ready to install.

Approve Tacitum's guards

On your first exchange, Codex asks you to review the hooks of the plugin: these are Tacitum's three guards, which remind Codex to go through Tacitum for any document and stop its own tools from reading a raw file directly. Allow the selected items (or allow them all). Until they are approved, these protections are not active.

Codex Desktop, hook review window: three Tacitum plugin hooks ticked, with buttons to postpone, allow all or allow the selected items (French interface)
The Tacitum plugin's three guards, to approve once in Codex.

In the Codex input box, the Tacitum tag appears; the plugin also suggests the prompt "Analyse mon document avec Tacitum" (analyse my document with Tacitum).

New Codex Desktop chat: the Tacitum tag above the input box and the suggested prompt 'Analyse mon document avec Tacitum'
Codex is plugged in: the Tacitum prompt is ready.
After a Tacitum update that brings new AI Connector features, run "Connect Tacitum to Claude…" or "Connect Tacitum to Codex…" again and reinstall the extension or plugin: they embed the connection component, which must match your version of Tacitum. The same applies if you move or reinstall Tacitum.

Step 3 — Have a document (or a folder) analysed

Ask the assistant, naming Tacitum

In a Claude Desktop or Codex Desktop conversation, phrase your request so that it says the document must go through Tacitum. Do not attach the file to the conversation: Tacitum is the one that reads it, on your machine.

Type into the assistantAnalyse my contract with Tacitum, then summarise the risky clauses.
For a whole folderOpen my client's folder with Tacitum — I'll pick it on my computer — then rebuild the timeline and list the points to check.

The assistant calls Tacitum, which opens its file picker in the foreground (one or more documents) or, if you asked for a folder, its folder picker (subfolders included, up to 30 documents). Formats: .docx, .pdf, .xlsx / .xlsm, .pptx, .txt, .csv, as well as scans and images (.png, .jpg, .tif, .bmp, .webp, read by text recognition).

Codex Desktop with Tacitum's file picker in the foreground: 'Choose the document(s) to send (anonymised) to Codex' (French interface)
At the assistant's request (here Codex), Tacitum opens its picker: the file never goes through the conversation.

Check the masked data

Tacitum analyses the document on your machine. The engine loads with each request, in the background as soon as the picker opens: allow around twenty to thirty seconds after you make your choice (less if you took your time choosing, more on a modest machine, for a scan or for a whole folder). Then the review window you already know opens, with a banner reminding you that the assistant is waiting for this document. You can keep a value detected by mistake, mask a term that was missed, or leave a category in clear (dates, for example, are often useful for the analysis).

For a folder, all the documents are analysed together: the same person or company carries the same code in every document, which lets the assistant cross-check them. You review each document ("Confirm and next file") or, if you prefer, you choose "Anonymize all without review": the remaining documents are then processed with your category choices. Nothing leaves before the end of the batch. Cancelling means no document is sent.

Tacitum review window in AI Connector mode: banner 'Claude is asking to read these 6 documents', colour-coded anonymised preview on the left, table of detections on the right, Confirm and send to Claude button (French interface shown)
The review before sending, here on the 6th document of a folder requested by Claude (fictitious data). Dates were left in clear for the deadlines.
The same Tacitum review window opened over Codex Desktop: banner 'Codex is asking to read this document', anonymised contract, Confirm and send to Codex button (French interface)
With Codex, the same window: only the wording changes.

Read what the assistant will receive, then send

Each confirmed document is written to Documents\Tacitum\Anonymisés. After the last confirmation, Tacitum reads them back exactly as written and runs them through a safety net (a value masked in one document is masked in all of them). A final screen shows you, document by document, the exact text that will be sent, with the number of masked items per category. Document titles are anonymised too (the original file name goes through the engine) and can be renamed with a double-click.

Only the "Confirm and send to Claude" button (or "… to Codex") sends anything. If you would rather skip this screen in future, a checkbox turns it off; to get it back, remove the mcp_apercu_envoi key from Tacitum's config.json file, in %APPDATA%\Tacitum.

'What Claude will receive' screen: list of documents with anonymised titles on the left, exact text sent on the right, masked data per category, Confirm and send to Claude button (French interface shown)
"What Claude will receive": the text that is sent, with no surprises.

The assistant answers, with the labels

The assistant receives the anonymised texts and works on them as usual: it refers to people and companies by their codes, which stay consistent from one document to the next. If your review takes a while, it waits and picks up again on its own: you have nothing to restart.

Claude Desktop conversation: request to analyse a contract with Tacitum, note that the Tacitum integration was used, then the analysis of the anonymised contract ranked by severity (French interface)
Claude Desktop: the analysis of a fictitious contract, received anonymised via Tacitum.
Codex Desktop conversation: 'Analyse mon document avec Tacitum', note that the Tacitum integration was used, then the contract analysis and a request for a review with tracked changes (French interface)
Codex Desktop: same workflow, same fictitious contract.
No quota with the licence. With an active Tacitum licence and the AI Connector, documents sent to the assistant are not counted (technical limits per request: 30 documents, 60 corrections per Word revision; see "Limits"). During the free trial, each document validated and sent to the assistant counts as one of the 10 free conversions, as in the app; once the trial is used up, nothing more is analysed or sent until a licence is activated.

Step 4 — Read the answer back in clear, on your machine

"Show me your answer in clear with Tacitum"

Ask the assistant to show its answer in clear: Tacitum opens a local window where your real values are put back, in red, in place of the codes. This window stays open until you close it and collects the assistant's following answers (history on the left). You can show the labelled version as the assistant wrote it, copy the text, or save it as Word with "Save as Word…", without going back through the AI.

What appears here never goes back to the assistant: Tacitum only tells it how many values were put back.

Type into the assistantShow me your answer in clear with Tacitum.
'Claude's answer in clear' window: case summary with the real names put back in red, history of answers on the left, Save as Word and Copy text buttons (French interface shown)
Claude's answer, read back with the real values (fictitious here). It never left your machine.
Restorable mode is what makes this possible: the mapping between your values and the codes is kept only on your machine, encrypted and tied to your Windows account, then deleted after the period chosen in Settings (30 days by default). Restorable mode is on by default; if it was turned off when Tacitum was installed, reading back in clear is not possible. The AI Connector applies this period after each document checked for the assistant (with "When the program closes", it keeps one day, for the length of the exchange).

Going further

The AI Connector is not limited to reading. You get all of these features by talking to the assistant; Tacitum handles the rest, locally.

A Word or Excel document in clear

Ask for a deliverable: the assistant drafts it with the labels, and Tacitum creates the file with your real values on your machine ("Save as", in Documents\Tacitum\En clair), then opens it in Word or Excel. The assistant never sees the final file or its name.

Write me a summary note in Word for this case, with the grounds and the figures.

Answer the assistant without revealing anything

The assistant needs a detail, an e-mail you received, some notes? Do not paste them into the conversation: ask for the secure input channel. You write in clear in a Tacitum window, the text is anonymised with the same codes as your documents, you review it, then you send it.

I'll give you more information through Tacitum: open the secure input.
Secure input window: Claude's question at the top with the name restored in red, text typed in clear in the middle, colour-coded anonymised version at the bottom, Send anonymized to Claude button (French interface shown)
Secure input: you type in clear, the assistant receives the masked version.

Revise a Word contract, with tracked changes

The assistant suggests corrections to the document it received; Tacitum applies them, in clear, from the original file to a _revise.docx copy: Word revision marks and, for each change the assistant gave a reason for, a Word comment. The original is never touched; you accept or reject each change in Word.

Review this contract with Tacitum and fix the non-compliant clauses, with tracked changes.
Word open on the _revise copy of the contract: probation-period clause struck through and replaced with revision marks, comments signed 'Codex via Tacitum' in the margin, real names in clear
The revised copy, open in Word: tracked changes and comments signed "Codex via Tacitum", with the real (fictitious) values.

Put a file received from the assistant back in clear

Downloaded a file from the assistant that still contains labels? Tacitum creates a _restaure copy in clear next to it, without sending anything back to the AI. Works for Word, Excel, PowerPoint, PDF, text, CSV and Markdown.

Put this file back in clear with Tacitum.

The same actions remain available in the app, outside the assistant: the "Recover my values" page restores a pasted text or a document.

What goes to the assistant, what stays with you

The AI Connector changes nothing about Tacitum's rule: the raw document never leaves your machine. Here, precisely, is what is sent and what never is.

Sent to the assistant

  • The anonymised text, read back from the file produced and run through the safety net: exactly what the "What Claude will receive" screen shows.
  • One anonymised title per document (the file name run through the engine, e.g. 06_Lettre_[NOM-A2H7KQ]).
  • The number of masked items per category ("NOM ×4, ADRESSE ×6"), the format of each document (Word, PDF…), the note "from a scan" (and "hard to read" where applicable), the number of occurrences caught by the safety net, whether it was reviewed or confirmed in bulk, the number of documents not sent or skipped (unsupported format), and the categories you left in clear.
  • The text you type into the secure channel, once anonymised.
  • For reading back in clear, creating a document or a revision: counters only ("7 values put back").

Never sent

  • The original file, or any image, signature, stamp or metadata it contains.
  • The file name in clear (it often contains a person's name), or its location on your disk.
  • Your real values and Restorable mode's mapping table: they stay encrypted on your machine.
  • The content of the "in clear" windows, of the Word or Excel documents created, of the _restaure and _revise copies, or their names.
  • The details of an error: the assistant receives a generic message, the details are shown on your machine.
What about the network? The anonymisation engine stays 100% offline. The AI Connector adds a few exchanges with Tacitum's licence server, never a document: the key and the technical fingerprint of your Windows session (the same data as the licence check), plus, when you place an order, your express consent and the billing e-mail address if you enter a different one. These exchanges take place:
  • when the purchase window opens (the offer is loaded without any identifier; the billing e-mail address is shown masked);
  • when you place the order, then while the payment is being tracked;
  • when you click Refresh;
  • when Tacitum starts as the end date approaches (from 30 days before to 90 days after, at most once a day);
  • if the connector is inactive or expired, when the assistant asks for a document or opens the secure input, so that an extension made elsewhere shows up immediately.
Claude Desktop and Codex Desktop, for their part, talk to their publisher's servers (Anthropic, OpenAI) as for any conversation; that is precisely why only anonymised text goes through them. Details and retention periods: privacy policy, point 2.i (in French).

Limits and good practice

Never attach the raw document to the conversation

If you drop a file straight into Claude Desktop or Codex Desktop, it goes to the assistant's publisher before Tacitum can step in: no extension can intercept a chat attachment. Get into the habit of naming Tacitum in your request ("with Tacitum") or of using the assistant's Tacitum shortcuts; Tacitum then opens its own file picker. With Codex, the plugin's guards also stop its tools from reading a raw file directly; they do not cover an attachment or text pasted into the conversation.

Good to know

  • Two supported assistants: Claude Desktop and Codex Desktop, for Windows. The extension and the plugin are generated for your Tacitum installation; if you move or reinstall Tacitum, run "Connect Tacitum to…" again.
  • Only one pending request at a time: review, secure input or Word revision. Finish (or cancel) the current operation before making a new request.
  • 30 documents per request at most for a folder; beyond that, choose a subfolder. Old .doc files are not supported by the connector (convert them to .docx, or go through the app).
  • A Word revision covers at most 60 corrections per request.
  • Scans are read by text recognition: the transcription is flagged as such to the assistant, and a hard-to-read scan is explicitly marked. Review them carefully at the review step.
  • Reading back in clear depends on the local mapping: once it is purged (period chosen in Settings), a code can no longer be restored. Save as Word whatever you want to keep.
  • Tacitum is an aid, not a guarantee: no automated tool detects 100% of the personal data in a document. That is what the review step is for; you have the final say, including on the categories you choose to leave in clear.

Frequently asked questions

How much does the AI Connector cost, and is it a subscription?

€69 for one year of access (no VAT applicable, art. 293 B CGI), on top of the Tacitum licence (€79, one-time payment). When buying the licence, the Tacitum + AI Connector bundle combines both for €148; in the bundle, the AI Connector year starts on the day you activate your licence in Tacitum (activate within 12 months of purchase). It is not a subscription: no auto-renewal, nothing charged without a new purchase on your part. You are reminded before the end date, in the app and by e-mail at your licence's address. Invoice provided.

What happens when it expires?

Tacitum keeps working normally: anonymisation, review, "Recover my values". Only the connection with your AI assistant is turned off: if you ask it for a document, the assistant tells you that the AI Connector needs extending, and Tacitum opens a local window pointing you to the "AI Connector" window. You can extend for one year at any time; if you extend before the end, the year is added to the current period.

Can I try it with the 10 free conversions?

Yes. The free trial gives access to the AI Connector, with no purchase and no credit card: update Tacitum, connect Claude Desktop or Codex Desktop (step 2), and let it read your anonymised documents. Each document validated and sent to the assistant counts as one of the 10 free conversions. After that, the AI Connector adds to an active Tacitum licence: €69 for one year, or €148 in the bundle with the licence.

What exactly does the assistant receive?

Only the anonymised text, read back from the file produced and run through a safety net, document titles that are themselves anonymised, the format of each document and the number of masked items per category. Never the original file, its name in clear, your real values or the mapping table. The details are in the section "What goes to the assistant, what stays with you".

Can the assistant recover the real values?

No. It only receives the anonymised text, with no mapping table: for it, as for any recipient, it is irreversible. Reading back in clear happens in a Tacitum window, on your machine, from the encrypted mapping kept by Restorable mode, which is never sent.

Does it work with ChatGPT, Copilot or Gemini?

Not directly: the AI Connector supports Claude Desktop and Codex Desktop, for Windows. ChatGPT, Copilot, Gemini and the other assistants can still be used with Tacitum through the standard workflow: anonymise in the app, paste or attach the anonymised file, then restore the answer in "Recover my values". The list of supported assistants may change; during the period you have bought, Tacitum maintains compatibility with the ones announced, as far as their publishers allow.

My firm has several workstations: how does it work?

The AI Connector is bought per licence, so per user (one Windows session). For a deployment across several users, a single end date for the whole firm and a single invoice, write to sales@tacitum.tools (Enterprise offer).

Do the anonymised documents pile up on my disk?

The anonymised files produced for the assistant are stored in Documents\Tacitum\Anonymisés. The AI Connector purges them according to the retention period chosen in Settings, after each new document checked for the assistant; you can also delete them yourself at any time. The documents in clear that you create (Documents\Tacitum\En clair) are yours: Tacitum never touches them.

Need the basic workflow? See the installation and user guide. A question? contact@tacitum.tools.

The assistant reads, Tacitum protects.

Try it for free: the Tacitum trial includes the AI Connector. After that, you get it from inside Tacitum, in a few clicks: €69 for one year, no subscription. No licence yet? The Tacitum + AI Connector bundle (€148) combines both.