I do this as a service, but it is incredibly controlled. You upload the data to our SaaS tool, it is processed in a contained GCP instance in Belgium using Vertex to run Gemini confined to that data centre with no chance of it ever being used for training data, analysed for PII, then deleted from the GCP instance and data centre with all redaction done purely in the browser. Honestly, every possible control is in place.