PII Redaction — Basic

​

Policy JSON

{
  "guard": {
    "pii_detection": {
      "enabled": true,
      "action": "REDACT",
      "patterns": ["EMAIL", "PHONE", "SSN", "CREDIT_CARD"],
      "redact_in_logs": true
    }
  }
}

policy = {
    "guard": {
        "pii_detection": {
            "enabled": True,
            "action": "REDACT",
            "patterns": ["EMAIL", "PHONE", "SSN", "CREDIT_CARD"],
            "redact_in_logs": True,
        }
    }
}

​

What It Does

• Scans both input and output for email addresses, phone numbers, Social Security Numbers, and credit card numbers
• Redacts matches by replacing them with [REDACTED_EMAIL], [REDACTED_PHONE], etc.
• Redacts in audit logs so PII never persists in your logging infrastructure
• Uses deterministic regex-based detection — no LLM calls in the governance path

​

Example

My email is [email protected] and my SSN is 123-45-6789

My email is [REDACTED_EMAIL] and my SSN is [REDACTED_SSN]

{
  "action": "ALLOW",
  "risk_score": 0.6,
  "reasons": ["pii_detected_and_redacted"],
  "evidence": {
    "pii_findings": [
      { "type": "EMAIL", "action": "REDACT", "count": 1 },
      { "type": "SSN", "action": "REDACT", "count": 1 }
    ]
  }
}

​

Install

# Install via CLI
tealtiger policy install pii-redaction-basic

# Or copy the JSON above into your tealtiger.config.json

​

Customize

​

Related

• Content Moderation — Standard — Add content safety on top of PII protection
• Deny Secrets in Memory — Prevent PII from being stored in agent memory
• HIPAA Healthcare Pack — Stricter PII/PHI requirements for healthcare
• TealGuard Documentation — Full API reference