DICOM · Tool

DICOM Anonymizer — Remove PHI Locally in Your Browser

Free online DICOM anonymizer. De-identify .dcm files per DICOM PS3.15 Basic Confidentiality Profile without uploading anything. Runs entirely in your browser — the file never leaves your computer.

Coming soon Production de-ID help

In active development — not yet available in the browser. Get in touch if you need it today.

What it will do

In development. The anonymizer will walk every attribute in the file, apply the PS3.15 Basic Profile redaction rules, and produce a clean DICOM file with PHI removed and the pixel data intact — all client-side via dcmjs. You'll be able to download the anonymized file or a ZIP of an entire study once it ships.

Planned redaction set (Basic Profile)

  • Identity: PatientName, PatientID, IssuerOfPatientID, OtherPatientIDs.
  • Study context: StudyInstanceUID, SeriesInstanceUID, SOPInstanceUID remapped.
  • Timing: StudyDate/Time, AcquisitionDate/Time offset (configurable).
  • Free-text: PatientComments, StudyComments, AdditionalPatientHistory.
  • Operator + referring physician: names, addresses, telephone numbers.

What will stay

  • Pixel data — untouched.
  • Modality + body part — preserved for research utility.
  • Imaging parameters — slice thickness, pixel spacing, kVp, echo time.
  • Consistent UID remapping — all files in the same study will be remapped to the same new UIDs so PACS structure still works downstream.

When to use this vs RSNA CTP

A browser anonymizer (in development here) targets ad-hoc review, quick cross-institution sharing, and one-off study de-identification. Use RSNA CTP for project-specific pipelines with custom scripts, burned-in pixel redaction, or high-throughput research workflows. Saga's medical imaging team builds CTP pipelines for institutions that need both.

FAQ

What does "anonymize a DICOM file" mean?

It means removing the PHI (protected health information) from the DICOM metadata — patient name, medical record number, birth date, accession number, study UIDs — while keeping the pixel data and non-identifying imaging parameters intact. Required for most research, cross-institution sharing, and AI model training per HIPAA and DICOM PS3.15.

What is the DICOM PS3.15 Basic Confidentiality Profile?

PS3.15 defines the standard de-identification profile published by NEMA. The Basic Profile specifies which tags get redacted (PatientName, PatientID, *UIDs remapped) and which are preserved (modality, body part, study date offset). The Saga anonymizer is in active development and will implement Basic Profile by default with optional "Retain UIDs" / "Retain Safe Private" profiles.

Will the file upload to a server?

No. The anonymizer is being built to run entirely in your browser — the DICOM file will be parsed, redacted, and re-saved client-side. No network call will carry the file. When the tool ships you'll be able to verify this in DevTools Network tab: drag a file in, watch for zero outbound requests to saga-it.com or any other host carrying the file data.

Is this a replacement for RSNA CTP?

CTP is a server-deployed anonymization pipeline with a wider feature set (custom scripts, burned-in pixel redaction). The Saga anonymizer is being built as a fast browser tool for single-file or small-batch workflows — use CTP for large research pipelines, and Saga's for ad-hoc review once it ships. If you need de-identification today, talk to our team about managed pipelines.

Will it handle a whole study at once?

That's the plan — drag a folder or a DICOMDIR structure onto the anonymizer, and every .dcm file in the selection will run through the Basic Profile. Download will produce a ZIP of de-identified files preserving the folder structure.