Enabling PII masking
Regex masking before cache, embedding and (optionally) provider call.
Open Dashboard → Privacy → PII Masking. Toggle on the pattern families you want masked (email, phone, card, IBAN, API-keys) and choose the scope.
Two scopes
- Cache-only — masking runs before embedding and cache lookup, but the raw prompt is sent to the provider. Ideal when you want higher cache hit rate without changing what the model sees.
- Full — masking runs before the provider call too. The model only ever sees
<EMAIL_1>/<PHONE_1>placeholders. Ideal for compliance.
Custom patterns
Add your own regex under *Custom patterns* — one per line, named. Applied in order, before the built-ins. Handy for masking internal IDs, customer numbers, etc.