Enabling PII masking

Regex masking before cache, embedding and (optionally) provider call.

Open Dashboard → Privacy → PII Masking. Toggle on the pattern families you want masked (email, phone, card, IBAN, API-keys) and choose the scope.

Two scopes

  • Cache-only — masking runs before embedding and cache lookup, but the raw prompt is sent to the provider. Ideal when you want higher cache hit rate without changing what the model sees.
  • Full — masking runs before the provider call too. The model only ever sees <EMAIL_1> / <PHONE_1> placeholders. Ideal for compliance.

Custom patterns

Add your own regex under *Custom patterns* — one per line, named. Applied in order, before the built-ins. Handy for masking internal IDs, customer numbers, etc.