POL-006 · All prompts & logs

PII masking required

Compiled into the runtime gateway and evaluated inline on every prompt, tool call and completion in scope. Owned by DPO.

Simulate this policyhighenforcingEdit in rule builder

Triggers / 30d

1,830

blocks, masks and escalations

Integrations bound

7

enforced at each connection

Severity

high

owner DPO

Added latency

7 ms

p99 within the 60 ms budget

Rule definition

Compiled expression

When

  • recogniser hit on stored payload

Then

  • mask in transit
  • mask in ledger

Policy as code

apiVersion: truint.ai/v1
kind: RuntimePolicy
metadata:
  id: POL-006
  name: "PII masking required"
  owner: "DPO"
  scope: "All prompts & logs"
spec:
  severity: high
  mode: enforce
  when:
    - "recogniser hit on stored payload"
  then:
    - "mask in transit"
    - "mask in ledger"

Governance metadata

Policy ID
POL-006
Owner
DPO
Scope
All prompts & logs
State
Enforcing inline
Catalog version
2026.07.3
Last change
2026-07-22 · approved by AI Council

Bound integrations

Where this rule executes

Azure OpenAI · gpt-4.1INT-LLM-01 · Microsoft Azurecore.accounts.readINT-TOOL-01 · Core banking (Finacle)kyc.document.extractINT-TOOL-04 · Azure Doc Intelligencecrm.case.updateINT-TOOL-05 · Salesforce FSCContact Centre DesktopINT-APP-02 · GenesysCustomer 360 (Restricted)INT-DATA-01 · SnowflakeWhatsApp business channelINT-CH-02 · Meta

Recent evaluations

Decisions where this rule fired

11:40:27KYC Verification Agent· emp-20164allow

Extract PAN and Aadhaar from the uploaded onboarding pack.