Data Masking

Masking Types

• Full Mask: Replace with ***
• Partial: Show last 4 digits only
• Hash: SHA-256 hash
• Nullify: Return null
• Custom: User-defined function

Creating a Masking Policy

POST /api/v1/policies
{
  "name": "SSN Masking",
  "type": "masking",
  "rules": [{
    "columns": "tag:SSN",
    "mask": "partial",
    "config": {"show": 4, "from": "end"}
  }]
}

Dynamic Masking

Masking is applied dynamically based on the requesting user's permissions.