Masking
Technical
Concealing parts of a data value with a fixed character pattern( e.g., showing ”*—1234” for an SSN). Useful for display contexts; not a substitute for de-identification because the underlying values are still stored.
See also
- RedactionThe permanent removal of sensitive elements from a document or data set, leaving placeholders or blank space.
- TokenizationReplacing a sensitive value with a non-sensitive substitute (a "token") that has no exploitable value and can be reversed only through a secure mapping held elsewhere.
- ReplaceA de-identification method that swaps each detected entity with a numbered placeholder such as <<PERSON1>> or <<SSN3>>, often paired with a legend that can re-identify the original values.
- HighlightA non-destructive review mode in PII detection tools that overlays a colored marker on every detected sensitive entity without altering the underlying document.
Detect & redact sensitive data in your documents
PII Anomalyzer scans PDFs, Word, and Excel files for 55+ entity types using on-device AI. Your data never leaves your machine.