Skip to content
Maskflare
Talk to usStart free trial
Menu

PII redaction

Protect personal data before it leaves your control.

Maskflare detects personal data, secrets, and your own customer records in AI prompts, files, and data flows, and masks them before they reach systems that don't need the original values.
Start free trial See the approach
Stable-token flow
  1. 01

    Identify sensitive values

  2. 02

    Replace with stable tokens

  3. 03

    Restore only inside your boundary

Direct answer

What is PII redaction?

PII redaction detects personally identifiable information and removes, masks, or replaces it so the original value is not exposed to people or systems that do not need it.

Unlike a blanket block, redaction can preserve the useful context around a sensitive value. A support transcript, AI prompt, or log entry can continue through its workflow while names, email addresses, account numbers, or other identifiers are replaced according to policy.

Detection scope

PII types a policy may need to cover

Identity

Person names, dates of birth, and passport numbers

Contact

Email addresses, phone numbers, and postal addresses in 29 languages

Government identifiers

National ID, tax, and social security numbers for 47 countries, checksum-validated

Financial

Payment cards, IBANs, and bank account numbers

Secrets

232 API-key, token, password, and private-key formats

Your own data

Custom regex rules, term dictionaries, and Exact Data Match on your customer records

Each detector can be switched on per environment, and the console playground shows exactly which rule matched any piece of text.

Policy flow

How PII redaction works

  1. 01

    Detect

    574 built-in detectors, a local named-entity layer and your own rules find personal data and secrets in prompts, JSON, and documents.

  2. 02

    Apply policy

    Each rule masks, redacts, partially shows, hashes, encrypts, alerts on, or blocks what it finds.

  3. 03

    Protect

    Masked values become tokens before the request leaves; the real values come back in the response.

  4. 04

    Review

    The traffic log records which rules matched and how often, never the values themselves.

Enterprise workflows

Where redaction can reduce exposure

Generative AI

Mask prompts, attachments, and streamed responses between your apps and nine AI providers.

Employees on ChatGPT

Route browser and desktop AI traffic through the proxy, so prompts are masked with no code change.

RAG and embeddings

Mask documents before they're embedded, with stable stand-ins so retrieval still works.

Logs, tickets, and pipelines

Call mask and unmask from the SDK wherever text leaves your systems.

Related guidance

Continue your evaluation

PII redaction resource center PII redaction technical overview PII redaction for AI prompts What is PII redaction? What is data loss prevention? What is GenAI data security? Explore Maskflare Vault

PII redaction frequently asked questions

What is PII redaction?

PII redaction is the process of detecting personally identifiable information and removing, masking, or replacing it so the original value is not exposed to people or systems that do not need it.

How is PII redaction different from data masking?

Redaction removes or replaces sensitive values in content. Data masking is a broader term that can also include substituting realistic values, tokenization, encryption, or hiding data only in a particular interface.

Can PII be redacted before data is sent to an AI tool?

Yes. A redaction control can inspect a prompt or attachment before submission and replace detected personal information according to policy. Maskflare does this as a gateway or forward proxy in front of OpenAI, Anthropic, Gemini, and other providers, and can restore the values in the response.

Does PII redaction replace DLP?

No. PII redaction is one possible policy action inside a broader data loss prevention program. DLP determines what sensitive data is present and whether it should be allowed, blocked, audited, or transformed.

Where is Maskflare hosted?

Maskflare is hosted in the European Union. Prompts and responses are masked in memory and never stored; only metadata about each request is recorded.

How do I try Maskflare?

Book a 30-minute demo. We run your kind of prompts, providers, and data types through Maskflare and show how the gateway, proxy, or SDK would fit your stack.

See it on your own data

Try Maskflare free.
Bring your hardest prompts.

28-day free trial or 10,000 requests, whichever comes first. Point one app at the gateway or enroll a few laptops,
and watch what gets masked. Or talk to us first.

Start free trial Talk to us