Compliance & PII
Scans for personally identifiable information and regulated data categories, and supports automatic redaction before logging.
What it detects
The Compliance pillar combines pattern matching with named-entity recognition to find personal and regulated data in a response, scoring the disclosure risk.
PII categories
| Category | Examples |
|---|---|
| Identity | Names, dates of birth, national IDs, SSNs |
| Contact | Email, phone, postal address |
| Financial | Card numbers, bank accounts, IBANs |
| Health (PHI) | Diagnoses, medications, record numbers |
| Credentials | API keys, passwords, tokens |
Redaction
When PII is detected you can redact it before the response is stored or returned. The pii_detected flag lists the categories found so you can mask precisely.
VeldrixAI never persists raw PII in the audit trail — only the detection metadata (categories and counts), so the log itself is safe to retain.
Regulatory frameworks
The compliance pillar maps to the obligations in GDPR, HIPAA, CCPA/CPRA, and PCI-DSS. Pair it with the audit trail to evidence that every output was screened for regulated data.
Was this page helpful?