Redaction Operators
Replace, redact, mask, and hash.
replace (default)
Replaces detected entities with typed placeholders like <PERSON_1>, <EMAIL_1>. Best for downstream pipelines that need to preserve shape and identifier-like behavior.
redact
Removes the entity entirely. Use when you need irrecoverable deletion and don't care about preserving sentence structure.
mask
Replaces each character of the entity with an asterisk. Useful for human-readable surfacing of redacted content (support tickets, logs).
hash
Deterministic SHA-256 of the entity. Preserves referential integrity across documents — the same email always hashes to the same value within a tenant.