A computer system for protecting information associated with entities, the computer system comprising: an electronic processor configured to store records in a client database , the records including personally identifiable information associated with entities and a client identifier reference associated with each of the entities to identify the entity, the personally identifiable information accessible based on an authorization level associated with a user; receive a document containing both non-personally identifiable information and personally identifiable information; parse the document to determine the presence of personally identifiable information in the document ; match the personally identifiable information included in the document with records stored in the client database ; substitute the personally identifiable information included in the document with the corresponding client identifier reference stored in the client database ; and generate a human-legible view of the document containing the corresponding client identifier reference, wherein the electronic processor is further configured to: in response to a first personally identifiable information matching only one record in the client database, remove the first personally identifiable information from the document and replace the first personally identifiable information with a first client identifier reference; in response to a first personally identifiable information matching more than one record in the client database, provide a selection of matched records from the client database; and in response to a first personally identifiable information matching none of the records in the client database, update the client database with a new record and generate a new client identifier reference associated with the first personally identifiable information. store records in a client database , the records including personally identifiable information associated with entities and a client identifier reference associated with each of the entities to identify the entity, the personally identifiable information accessible based on an authorization level associated with a user; receive a document containing both non-personally identifiable information and personally identifiable information; parse the document to determine the presence of personally identifiable information in the document ; match the personally identifiable information included in the document with records stored in the client database ; substitute the personally identifiable information included in the document with the corresponding client identifier reference stored in the client database ; and generate a human-legible view of the document containing the corresponding client identifier reference, wherein the electronic processor is further configured to: in response to a first personally identifiable information matching only one record in the client database, remove the first personally identifiable information from the document and replace the first personally identifiable information with a first client identifier reference; in response to a first personally identifiable information matching more than one record in the client database, provide a selection of matched records from the client database; and in response to a first personally identifiable information matching none of the records in the client database, update the client database with a new record and generate a new client identifier reference associated with the first personally identifiable information. <EOS>