Nonimo for Irish firms and practices
Keep the PPSN in the practice, and still use AI on the file.
Nonimo lifts PPS numbers, Eircodes and Revenue references out of the text on your own computer, and leaves placeholders behind before anything goes to ChatGPT, Claude or Copilot. The real values are filled back in when the answer comes.
For accountants, solicitors and GP practices.
Mac with Apple silicon and macOS 14 or later · Windows 10 or later, 64-bit (x64) · under 2 MB.
The first time you open Nonimo, Windows may show a SmartScreen notice because the app is new: click “More info”, then “Run anyway”.
The 11 Irish identifiers it swaps out
Each number set out as it would appear on a real Irish form, and each one replaced by a placeholder before the AI reads a line.
| Identifier | Where you find it | What the AI reads |
|---|---|---|
| PPS number (PPSN) | Payslips, Revenue letters, social welfare forms | [PPS_NUMBER_1] |
| Tax reference number | Revenue correspondence, ROS printouts | [TAX_REFERENCE_IE_1] |
| VAT number | Invoices, VAT3 returns | [REFERENCE_1] |
| Individual Health Identifier (IHI) | HSE and hospital records | [IHI_IE_1] |
| Eircode | Letters, contracts, conveyancing files | [EIRCODE_1] |
| Land Registry folio number | Contracts for sale, title searches, deeds of charge | [FOLIO_1] |
| MPRN (electricity meter number) | Electricity bills, BER certificates, SEAI grant applications | [MPRN_IE_1] |
| Vehicle registration (reg) | Motor claims, Garda abstract reports, NCT certificates | [PLATE_IE_1] |
| High Court record number | Pleadings, court orders, the Legal Diary | [HIGH_COURT_RECORD_1] |
| WRC adjudication reference | Adjudication decisions, hearing notices, WRC correspondence | [WRC_CASE_1] |
| Revenue CHY number | Charity letterheads, donation forms, annual reports | [CHARITY_NUMBER_IE_1] |
The swap happens on the practice PC, and the reply comes back with the real details restored. Names, birth dates, IBANs, mobiles and email addresses get the same treatment; the security page explains how each one is spotted.
What Irish law asks before a client file meets a chatbot
Two layers apply here: the GDPR together with Ireland’s 2018 Data Protection Act, supervised by the Data Protection Commission, and above them a statute of its own for the PPS number.
SWCA 2005, s.262
Who may use a PPSN
Specified bodies, their agents and a short list of others may use the number, and section 262(9) makes any other use an offence. An AI provider is none of them. No Irish court has yet said whether a paste counts as use.
Article 28 GDPR
The processor contract
When a provider handles personal data for you, Article 28 wants a written contract with set terms. The four big providers publish one for their business plans; personal plans generally sit outside it.
Eircode
A postcode that is one door
Unlike postcodes elsewhere, which cover a cluster of homes, each Eircode belongs to a single address. Left in a passage, it tells the reader exactly where the client lives.
Article 33
Telling the DPC
Where a breach is likely to put people at risk, the Commission has to be notified within 72 hours. Last year it logged 6,521 valid notifications, and half came from post or email sent to the wrong person.
We agree with the Commission, which is why we call what Nonimo does pseudonymisation and never anything else. It takes the identifiers out, keeps what it needs to put them back on your own machine, and leaves you with personal data that is much less exposed. The 2018 Act itself, at section 36(1)(e)(iv), lists pseudonymisation among the suitable measures a controller can take. The PPSN in detail is in our guide to the PPS number and AI.
A summary, not legal advice. The AI policy template from the Law Society of Ireland puts personal data in public AI tools on its prohibited list, and CCAB-I tells accountancy firms to rule it out too.
Guides for Irish practices
Written for Irish law and the DPC, not borrowed from London.
Special category data under GDPR: what to keep out of AI
Special category data under GDPR turns up in Irish payslips, sick certs and WRC files. What Article 9 changes when that text goes into an AI tool.
Engagement letter AI clause: what to tell clients in Ireland
An engagement letter AI clause for Irish solicitors and accountants: what the Law Society and your Institute expect, and wording ready to copy into the letter.
GDPR patient data and AI: what an Irish practice keeps out
GDPR patient data in an Irish practice: what can go into ChatGPT for a referral letter, what cannot, and the IHI and PPSN rules that sit on top.
Is pseudonymised data personal data? An Irish answer for AI
Is pseudonymised data personal data? Yes, if you hold the key. For the AI provider, the Court of Justice said in 2025 that it depends. The Irish view.
Practice Direction HC 142: what you sign, what stays in the firm
Practice Direction HC 142 applies from 1 September 2026. What the AI declaration on an affidavit covers, and what should never reach the chatbot first.
Is a PPSN personal data? What to take out before you use AI
Yes, and Irish law also says who may use it at all. What else comes out of a file before an AI sees it, and why the DPC says that is not anonymising.
AI in Irish local authorities: what council staff can use
What council staff already use AI for, what resident data must not leave the building, and what the Act, the DPC and the NCSC ask of the 31 local authorities.
The EU AI Act in Ireland: what your business has to do
Ireland is in the EU, so the Act applies here in full. What a deployer owes today, the dates after the July 2026 omnibus, and which Irish body enforces what.
Which AI is GDPR compliant? An Irish guide
None on its own. What decides it in Ireland is the contract, the training, where the data goes and what you put in. Four assistants, criterion by criterion.
Does ChatGPT keep your data? An Irish guide to OpenAI
Yes, and turning training off does not undo it. What OpenAI stores, for how long, who reads it, and why the Irish DPC is the regulator that decides.
Does Claude train on your data? An Irish guide to Anthropic
On a personal plan it can, unless you say no, and then it keeps chats for five years. On a business plan it may not. The documents, and the Irish regulator.
Does Gemini use your data? An Irish guide to Google's rules
Google Ireland Limited runs Gemini here, human reviewers read a subset, and reviewed chats last three years. What the settings change, and what they do not.
Which Copilot has your data? An Irish guide to Microsoft
Copilot is four products, and the answer changes with each. What Microsoft trains on, what leaves the EU Data Boundary, and what the DPC told LinkedIn.
Cyber insurance in Ireland: what it covers and how to compare
Nine Irish cyber documents, opened and read: what cover here actually pays for, what the Consumer Insurance Contracts Act 2019 changes, and how to compare.
Pricing, and where things stand
The desktop app is available on both platforms, Mac and Windows; the browser extension and the compliance panel are in development.
Nonimo’s free plan stops at a set number of words each month. Leave an email address on our licence page and a free licence file comes back that removes the cap until 31 January 2027, with no account to set up.
- Free today, on Mac and Windows
- With a monthly word allowance
- The free licence lifts it until 31 January 2027, no account needed
Questions Irish practices ask
Is a PPSN personal data?
Yes, and more so than most data: a single number that singles out one person is exactly what the GDPR means by an identifier. Irish law then adds a second layer on who may use the number at all: section 262, in the social welfare legislation of 2005.
Does Nonimo help an Irish practice meet its GDPR obligations?
Nonimo helps an Irish practice meet its GDPR obligations, but it does not meet them on the practice's behalf. Pseudonymisation is one of the measures the GDPR names in Articles 25 and 32(1)(a), and swapping identifiers for placeholders before a paste cuts what reaches the AI provider, in keeping with data minimisation under Article 5(1)(c). The practice still needs a lawful basis, an Article 28 contract with the provider and a record of the processing, and the pseudonymised text remains personal data for whoever holds the key to reverse it.
Does Nonimo send our files to the US?
It doesn't send your files anywhere. Detection happens on the laptop or desktop in front of you, and the passage you select never touches our servers. The app's only report to us is a count sent once a day, with things like words used against the monthly allowance, which build and platform you're on, and an installation number; the security page sets out each field.
Who regulates AI tools in Ireland?
For personal data, the Data Protection Commission, which is also the lead EU supervisor for the large technology firms headquartered in Ireland. Your own use of a tool stays your responsibility as controller, whoever supervises the provider.
What does Nonimo cost?
The free plan stops at a set number of words each month, and the licence that removes the cap is free until 31 January 2027, with no account to set up.