From the README

# 🛡️ GDPR / PII Redactor

> MCP server that detects and redacts Personally Identifiable Information from raw text — deterministic regex, zero external APIs, V8-safe. Built with [Vurb.ts](https://github.com/vinkius-labs/vurb.ts).

## Why This Exists

Every AI agent that processes user text risks leaking PII — names, emails, tax IDs, credit cards. GDPR mandates **data minimisation** (Art. 5(1)(c)) and **purpose limitation** (Art. 5(1)(b)).

This MCP server gives any LLM client a **deterministic PII firewall** — call `pii.redact` before saving any user-provided text. Zero hallucination, zero external API calls, zero network dependencies.

## Architecture

```
Agent receives user text
        ↓
MCP scans with 30 validated patterns (27 EU states + 5 universal)
        ↓
Replaces PII with [REDACTED_TYPE] placeholders
        ↓
Returns safe text + audit report (with DLP-protected values)
        ↓
Agent stores only the redacted text
```

**Double DLP protection:**
- **Engine** redacts PII in