egress

41 Dtwo policies tagged "egress", including Airtable: Redact PII in Record Reads, Asana: Redact PII in Task & Comment Reads. Browse by what the control does rather than which app it targets.

On this page

Airtable

Airtable: Redact PII in Record Readsegress · AirtableScans the responses of the Airtable record-read tools — the calls that return row fields values — and rewrites high-confidence PII shapes to a fixed…

Asana

Asana: Redact PII in Task & Comment Readsegress · AsanaOn the Asana MCP read path, this transform scans the free-text business fields that ride back in task, comment/story, and status-update responses — notes,…

BigQuery

BigQuery: Redact PII in Query Resultsegress · BigQueryScans the content returned by BigQuery's result-returning tools and rewrites high-confidence PII shapes to fixed, non-recoverable redaction tokens before the…

Box

Box: Redact PII from File Content on Egressegress · BoxScans the responses of Box content-returning tools and rewrites personally identifiable information to fixed redaction tokens before the response reaches the…

Confluence

Confluence: Redact PII from Page & Comment Responsesegress · ConfluenceScans the responses of Confluence page, comment, and search read tools and rewrites personally identifiable information to fixed redaction tokens before the…

Databricks

Databricks: Mask Cardholder PANs in Responsesegress · DatabricksMasks payment-card numbers (PANs) in Databricks tool responses before the agent receives them.Databricks: Redact PII in Tool Responsesegress · DatabricksScans the response payloads of the Databricks MCP tools that carry lakehouse data back to the agent and rewrites personally identifiable information to fixed…

DocuSign

Cap Docusign Directory and Document Egressegress · DocuSignBounds the two largest data-out channels in the Docusign MCP landscape:Docusign: Redact SSN, Bank & Card Values on Egressegress · DocuSignScans the responses of Docusign envelope- and agreement-reading tools and rewrites high-confidence regulated identifiers before the response reaches the…

Dropbox

Dropbox: Redact PII, PANs, and Secrets in File Contentegress · DropboxScans the responses of the Dropbox file-content read tools and sanitises the returned text before it reaches the agent.

GitHub

GitHub: Redact Secrets from Read Responsesegress · GitHubScans the responses of GitHub's crown-jewel read tools and masks known credential shapes with a fixed [REDACTED-SECRET] marker before the text enters agent…

Glean

Glean: Redact PII from Read-Tool Responsesegress · GleanScans the responses of Glean's content-returning read tools and rewrites high-confidence PII to fixed redaction tokens before the response reaches the…

Gmail

Filter Dormant Conversations Out of Gmail Readsegress · Gmailgoverned responses)Hide Threads Carrying a Restricted Gmail Labelegress · Gmailgoverned responses)Mask Card Numbers in Email Content Read by Agentsegress · GmailMasks payment-card-number (PAN) shapes in email content returned to agents by Gmail mailbox-read tools.Strip Blocked Senders from Gmail Readsegress · Gmailgoverned responses)

Google Calendar

Redact Attendee PII and Meeting Links in Calendar Readsegress · Google CalendarScrubs sensitive fields from the responses of Google Calendar read tools before they reach the agent, for callers who lack the placeholder calendar-full-read…

Google Drive

Exclude Personal Drives from Agent Readsegress · Google Drivemetadata lookups and unparseable governed responses)Google Drive: Redact PII from File Contentegress · Google DriveScans the responses of the content-returning Google Drive tools — file reads, downloads, and Docs/Sheets/Slides content fetches — and rewrites personally…

Gusto

Gusto: Redact Financial IDs in Responsesegress · GustoInstantiates PF-02 (redact-pii-egress) on the Gusto read path.

HubSpot

HubSpot Redact PIIegress · HubSpotRedacts sensitive contact information from HubSpot tool responses before they reach the caller.

Intercom

Intercom: Mask Card Numbers in Conversation Responsesegress · IntercomMasks payment-card numbers (PANs) in Intercom conversation content returned to agents by the conversation- and free-text-returning read tools.Intercom: Redact PII from Conversation & Contact Readsegress · IntercomScans the free-text returned by Intercom's conversation- and contact-read MCP tools and rewrites high-confidence personal identifiers and credential shapes…

Jira

JIRA: Redact Sensitive Information from Issue Viewsegress · JiraRedacts sensitive content from the responses of JIRA issue-view tools before they reach the caller.

Linear

Fence Roadmap and Initiative Reads (Egress)egress · LinearFences the responses of Linear's roadmap, initiative, and strategy read tools.Linear: Redact Customer Revenue and Contactsegress · LinearMasks commercial and contact identifiers in the responses of Linear's Customers read tools before they reach the agent.

Microsoft 365

Microsoft 365: Redact PII from Mail, Files & Transcriptsegress · Microsoft 365Scans the responses of the highest-density PII read surfaces in Microsoft 365 — mail bodies, Excel ranges, SharePoint list items, meeting transcripts, and…

Monday.com

monday: Redact PII in Board & Doc Readsegress · Monday.comTwo egress controls in one policy, both scoped to the monday MCP read path:

NetSuite

NetSuite: Redact Financial PII in Responsesegress · NetSuiteInstantiates PF-02 (redact-pii-egress) on the NetSuite read path.

Notion

Notion: Redact PII from Read Responsesegress · NotionScans the responses of the Notion hosted MCP server's content-returning read tools and rewrites personally identifiable information to fixed redaction tokens…

Onboarding starters

Email Address Redactionegress · Onboarding startersThis policy automatically masks email addresses in what a tool sends back, replacing each one with [REDACTED] before your agent ever sees it.

Power BI

Power BI: Redact PII in Query Resultsegress · Power BIScans the content returned by Power BI's result-returning tools and rewrites high-confidence PII shapes to fixed, non-recoverable redaction tokens before the…

QuickBooks

QuickBooks: Redact Employee & Vendor PII on Readegress · QuickBooksOn the read path, this policy masks sensitive identifiers in the responses of four QuickBooks Online (QBO) name-entity read tools — get employee, search…

Salesforce

Salesforce Redact PIIegress · SalesforceRedacts personal contact information from Salesforce tool responses before they reach the caller.

Slack

Slack: Mask Card Numbers in Message and Search Responsesegress · SlackMasks payment-card numbers (PANs) in Slack content returned to agents by message-read, thread-read, canvas-read, history, and search tools.Slack: Redact Profile PII from User Lookupsegress · SlackRedacts personally identifiable information — email addresses, phone numbers, and Slack custom profile fields (which commonly carry phone, title, and…

Snowflake

Snowflake: Redact PII from Query Result Setsegress · SnowflakeScans the row content returned by the result-returning Snowflake MCP tools and rewrites personally identifiable information to fixed redaction tokens before…

Stripe

Stripe: Redact Customer PII from Bulk Readsegress · StripeMasks customer PII in the responses of Stripe's bulk PII egress channels before they reach the agent.

Tableau

Tableau: Redact PII & Mask PANs in Query Resultsegress · TableauTableau is a warehouse proxy: the data-returning tools stream raw row-level content out of whatever the published datasource connects to — PII, PHI, payroll,…

Zapier

Zapier: Mask Card Numbers in Read Responsesegress · ZapierMasks payment-card numbers (PANs) in Zapier MCP read responses before they reach the agent.

Zoom

Zoom: Redact PII in Meeting Intelligenceegress · ZoomScans the responses of Zoom's meeting-intelligence read surfaces — AI summaries, verbatim transcripts, recording resources, and Zoom Docs content — and…