{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-agen-for-work/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":[]},"type":"markdown"},"seo":{"title":"Masking types","siteUrl":"https://developers.frontegg.com/","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"masking-types","__idx":0},"children":["Masking types"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Agen for Work provides predefined data masking types organized by regulatory compliance framework. When creating a data protection policy, you select which categories of sensitive data to detect and mask in tool responses before they reach AI agents."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Each category maps to a specific compliance framework and contains multiple data type definitions that Agen for Work can detect and redact automatically."]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"phi--protected-health-information","__idx":1},"children":["PHI — Protected Health Information"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["39 predefined types covering health-related identifiers required for HIPAA compliance. Includes international variants for countries including Australia, Canada, Germany, and the Netherlands."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Data type"},"children":["Data type"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Au Medicare"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Australian Medicare card numbers"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Canada Health Service Number"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Canadian provincial health service identifiers"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Canada Personal Health Id Number Phin"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Canadian personal health identification numbers"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Canada Social Insurance Number"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Canadian social insurance numbers"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Dutch Bank Account Number"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Dutch banking account identifiers"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Email Address"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Email addresses in any standard format"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Germany Drivers License Number"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["German driver's license numbers"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Germany Id Number"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["German national identity card numbers"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Germany Passport Number"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["German passport numbers"]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["And 30 additional types covering insurance numbers, medical record identifiers, national health IDs, and other protected health information across jurisdictions."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Use ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Select all"]}," in the PHI category to apply all 39 types at once."]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"pii--personally-identifiable-information","__idx":2},"children":["PII — Personally Identifiable Information"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["General personally identifiable information types applicable across industries and jurisdictions. Covers the most commonly regulated personal data categories:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Social security numbers"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Driver's license numbers"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Passport numbers"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Financial account numbers"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["National identification numbers"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Date of birth identifiers"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Physical address components"]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"gdpr--general-data-protection-regulation","__idx":3},"children":["GDPR — General Data Protection Regulation"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Data types regulated under the EU General Data Protection Regulation. Focused on personal data of EU residents and data subjects, including:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Full names and name components"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Physical addresses and location data"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["National IDs and tax numbers specific to EU member states"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Biometric data identifiers"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Online identifiers (where applicable)"]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"pci-dss--payment-card-industry-data-security-standard","__idx":4},"children":["PCI DSS — Payment Card Industry Data Security Standard"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Payment card data types required to be protected under PCI DSS compliance:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Primary account numbers (credit and debit card numbers)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["CVV and card verification codes"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Cardholder names"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Card expiration dates"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Full magnetic stripe data"]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"ccpa--california-consumer-privacy-act","__idx":5},"children":["CCPA — California Consumer Privacy Act"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Data types specific to the privacy rights of California residents under CCPA. Covers categories of personal information defined by the Act, including:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Identifiers such as real name, alias, postal address, and email"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Commercial information (purchase history, financial records)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Geolocation data"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Professional or employment-related information"]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"coppa--childrens-online-privacy-protection-act","__idx":6},"children":["COPPA — Children's Online Privacy Protection Act"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Personal information related to children under 13, regulated under the US Children's Online Privacy Protection Act:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Child's name and contact information"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Persistent identifiers that can be used to track a child"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Geolocation information precise enough to identify a street address"]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"how-masking-works","__idx":7},"children":["How masking works"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["When a data protection policy is active and its targeting conditions match a tool call:"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Agen for Work receives the tool response from the connected SaaS API."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The response is scanned for patterns matching the selected data types."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Detected sensitive values are replaced with masked equivalents — for example, ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["***-**-1234"]}," for a Social Security number, or ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["****@****.com"]}," for an email address."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The masked response is returned to the AI agent."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The original data is never stored by Agen for Work and never reaches the AI agent or AI platform."]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"combining-categories","__idx":8},"children":["Combining categories"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["A single data protection policy can include data types from multiple categories. For example:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["A healthcare organization might combine ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["PHI"]}," and ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["PII"]}," to cover both HIPAA requirements and general personal data."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["A company operating in the EU might combine ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["GDPR"]}," and ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["PCI DSS"]}," to protect both European personal data and payment card information."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["A platform serving California users might combine ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["CCPA"]}," and ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["PII"]}," for comprehensive California compliance coverage."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Use the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Select all"]}," option within each category to quickly enable all types in that category, then refine by deselecting types that are not relevant to your use case."]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"related-topics","__idx":9},"children":["Related topics"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"/agen-for-work/data-protection/overview"},"children":["Data protection overview"]}," — How to create and manage data protection policies"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"/agen-for-work/policies/overview"},"children":["Policies"]}," — Access control policies that govern tool usage"]}]}]},"headings":[{"value":"Masking types","id":"masking-types","depth":2},{"value":"PHI — Protected Health Information","id":"phi--protected-health-information","depth":3},{"value":"PII — Personally Identifiable Information","id":"pii--personally-identifiable-information","depth":3},{"value":"GDPR — General Data Protection Regulation","id":"gdpr--general-data-protection-regulation","depth":3},{"value":"PCI DSS — Payment Card Industry Data Security Standard","id":"pci-dss--payment-card-industry-data-security-standard","depth":3},{"value":"CCPA — California Consumer Privacy Act","id":"ccpa--california-consumer-privacy-act","depth":3},{"value":"COPPA — Children's Online Privacy Protection Act","id":"coppa--childrens-online-privacy-protection-act","depth":3},{"value":"How masking works","id":"how-masking-works","depth":3},{"value":"Combining categories","id":"combining-categories","depth":3},{"value":"Related topics","id":"related-topics","depth":3}],"frontmatter":{"title":"Masking types","seo":{"title":"Masking types"}},"lastModified":"2026-06-11T01:51:15.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/agen-for-work/data-protection/masking-types","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}