pii

39 Dtwo policies tagged "pii", including Airtable: Redact PII in Record Reads, Asana: Redact PII in Task & Comment Reads. Browse by what the control does rather than which app it targets.

On this page

Airtable
Asana
BigQuery
Box
Confluence
Databricks
DocuSign
Dropbox
Glean
Google Calendar
Google Drive
Gusto
HubSpot
Intercom
Jira
Linear
Microsoft 365
Monday.com
NetSuite
Notion
Onboarding starters
Power BI
QuickBooks
Salesforce
ServiceNow
Slack
Snowflake
Stripe
Tableau
Zoom

Airtable

Airtable: Redact PII in Record Readsegress · AirtableScans the responses of the Airtable record-read tools — the calls that return row fields values — and rewrites high-confidence PII shapes to a fixed…

Asana

Asana: Redact PII in Task & Comment Readsegress · AsanaOn the Asana MCP read path, this transform scans the free-text business fields that ride back in task, comment/story, and status-update responses — notes,…

BigQuery

BigQuery: Redact PII in Query Resultsegress · BigQueryScans the content returned by BigQuery's result-returning tools and rewrites high-confidence PII shapes to fixed, non-recoverable redaction tokens before the…

Box

Box: Redact PII from File Content on Egressegress · BoxScans the responses of Box content-returning tools and rewrites personally identifiable information to fixed redaction tokens before the response reaches the…

Confluence

Confluence: Redact PII from Page & Comment Responsesegress · ConfluenceScans the responses of Confluence page, comment, and search read tools and rewrites personally identifiable information to fixed redaction tokens before the…

Databricks

Databricks: Redact PII in Tool Responsesegress · DatabricksScans the response payloads of the Databricks MCP tools that carry lakehouse data back to the agent and rewrites personally identifiable information to fixed…

DocuSign

Cap Docusign Directory and Document Egressegress · DocuSignBounds the two largest data-out channels in the Docusign MCP landscape:Docusign: Redact SSN, Bank & Card Values on Egressegress · DocuSignScans the responses of Docusign envelope- and agreement-reading tools and rewrites high-confidence regulated identifiers before the response reaches the…

Dropbox

Dropbox: Redact PII, PANs, and Secrets in File Contentegress · DropboxScans the responses of the Dropbox file-content read tools and sanitises the returned text before it reaches the agent.

Glean

Glean: Redact PII from Read-Tool Responsesegress · GleanScans the responses of Glean's content-returning read tools and rewrites high-confidence PII to fixed redaction tokens before the response reaches the…

Google Calendar

Redact Attendee PII and Meeting Links in Calendar Readsegress · Google CalendarScrubs sensitive fields from the responses of Google Calendar read tools before they reach the agent, for callers who lack the placeholder calendar-full-read…

Google Drive

Google Drive: Redact PII from File Contentegress · Google DriveScans the responses of the content-returning Google Drive tools — file reads, downloads, and Docs/Sheets/Slides content fetches — and rewrites personally…

Gusto

Gusto Cap Roster Exportingress · GustoThrottles full-roster exfiltration on Gusto's two broad outbound list tools — list company employees and list company contractors — by rewriting their…Gusto: Redact Financial IDs in Responsesegress · GustoInstantiates PF-02 (redact-pii-egress) on the Gusto read path.

HubSpot

HubSpot Cap Bulk Exportingress · HubSpotClamps the page size of HubSpot bulk-read tool calls before they reach the HubSpot MCP server, so a single agent request to a covered bulk-read tool can…HubSpot Redact PIIegress · HubSpotRedacts sensitive contact information from HubSpot tool responses before they reach the caller.

Intercom

Fence Intercom Contact & Company PII Readsingress · IntercomGates Intercom's structured-PII read surface — customer contact and company profiles — by IdP group.Intercom: Redact PII from Conversation & Contact Readsegress · IntercomScans the free-text returned by Intercom's conversation- and contact-read MCP tools and rewrites high-confidence personal identifiers and credential shapes…

Jira

JIRA: Redact Sensitive Information from Issue Viewsegress · JiraRedacts sensitive content from the responses of JIRA issue-view tools before they reach the caller.

Linear

Linear: Redact Customer Revenue and Contactsegress · LinearMasks commercial and contact identifiers in the responses of Linear's Customers read tools before they reach the agent.

Microsoft 365

Microsoft 365: Redact PII from Mail, Files & Transcriptsegress · Microsoft 365Scans the responses of the highest-density PII read surfaces in Microsoft 365 — mail bodies, Excel ranges, SharePoint list items, meeting transcripts, and…

Monday.com

monday: Redact PII in Board & Doc Readsegress · Monday.comTwo egress controls in one policy, both scoped to the monday MCP read path:

NetSuite

NetSuite: Redact Financial PII in Responsesegress · NetSuiteInstantiates PF-02 (redact-pii-egress) on the NetSuite read path.

Notion

Fence Notion Member Directory to Admin & ITingress · NotionDenies calls to the Notion member-directory tool (notion-get-users, matched by the -get-users suffix) unless the caller's IdP groups include an admin or IT…Notion: Redact PII from Read Responsesegress · NotionScans the responses of the Notion hosted MCP server's content-returning read tools and rewrites personally identifiable information to fixed redaction tokens…

Onboarding starters

Email Address Alertingress · Onboarding startersA watch-only starter policy.Email Address Blockingress · Onboarding startersThis policy stops a request if it contains an email address. If there's no email address, the request goes through as normal.Email Address Redactionegress · Onboarding startersThis policy automatically masks email addresses in what a tool sends back, replacing each one with [REDACTED] before your agent ever sees it.

Power BI

Power BI: Redact PII in Query Resultsegress · Power BIScans the content returned by Power BI's result-returning tools and rewrites high-confidence PII shapes to fixed, non-recoverable redaction tokens before the…

QuickBooks

QuickBooks: Redact Employee & Vendor PII on Readegress · QuickBooksOn the read path, this policy masks sensitive identifiers in the responses of four QuickBooks Online (QBO) name-entity read tools — get employee, search…

Salesforce

Salesforce Protect Contact Fieldsingress · SalesforceBlocks Salesforce Contact updates that modify protected fields — ownership, account linkage, contact PII, name, and consent flags.Salesforce Redact PIIegress · SalesforceRedacts personal contact information from Salesforce tool responses before they reach the caller.

ServiceNow

Fence Sensitive ServiceNow Tablesingress · ServiceNowFences off the most sensitive ServiceNow tables from two routes that reach them:

Slack

Slack: Redact Profile PII from User Lookupsegress · SlackRedacts personally identifiable information — email addresses, phone numbers, and Slack custom profile fields (which commonly carry phone, title, and…Slack: Redact Sensitive Information from Messagesingress · SlackRedacts sensitive content from outgoing Slack message arguments before the call reaches Slack.

Snowflake

Snowflake: Redact PII from Query Result Setsegress · SnowflakeScans the row content returned by the result-returning Snowflake MCP tools and rewrites personally identifiable information to fixed redaction tokens before…

Stripe

Stripe: Redact Customer PII from Bulk Readsegress · StripeMasks customer PII in the responses of Stripe's bulk PII egress channels before they reach the agent.

Tableau

Tableau: Redact PII & Mask PANs in Query Resultsegress · TableauTableau is a warehouse proxy: the data-returning tools stream raw row-level content out of whatever the published datasource connects to — PII, PHI, payroll,…

Zoom

Zoom: Redact PII in Meeting Intelligenceegress · ZoomScans the responses of Zoom's meeting-intelligence read surfaces — AI summaries, verbatim transcripts, recording resources, and Zoom Docs content — and…