PII redaction
Redact in place. Ship nothing.
An agent that redacts sensitive records inside your own environment. Because the file stays where it lives, the control plane never sees the raw content — and neither does anyone else.
The redacted file is the only thing that ever leaves the machine.
Redaction that runs
where the data lives
In-place redaction of sensitive records with zero data movement. Same engine, same guarantees, anywhere you process PII.
Local Execution
Every byte of PII is processed on your hardware. The control plane orchestrates jobs — it never handles the content.
Signed, Identical Logic
The redaction plugin runs in a sandbox with seccomp, verified by Ed25519 signatures. Identical logic, everywhere, always.
Audit-Ready Record
Every run leaves an immutable audit trail: what was processed, by which plugin, with which result. No ambiguity, no shadow runs.
How it works
in production
A pipeline that redacts in place, with a full audit trail, on your machines.
A file lands
A CSV, PDF, or image containing sensitive records arrives in a watched folder.
Agent inspects it
The agent detects the format and runs the signed detection plugin locally.
Masks, never copies
Matches are masked in place. Nothing is extracted, copied, or transmitted.
Logs the action
Every redaction is written to the audit trail — field, reason, plugin, run.
Merges and cleans up
The safe version is written back where the original lived, ready for distribution — then the unredacted source is deleted. Only the audit record remains.
Validated where
it runs
Zero bytes of client PII in the control plane — by construction, not by policy.
By construction, not by policy. The control plane orchestrates only.
Detection and redaction run together inside the sandbox.
One self-hosted agent with a 12–15 MB footprint.
One immutable record of what was processed and why.
Plugins this solution
needs
Signed, sandboxed, and versioned. SentraZero runs them where your data lives — every decision logged and auditable.
detect_piiScans each row for SSNs, card numbers, emails, and dates. Field-level matches with regex and pattern checks.
inrows → field matches
{ "patterns": ["ssn", "card", "email", "dob"] }
✓ signed✓ sandboxedsha256:689b8c72…
redactMasks matched fields in place. Deterministic output — the same input always produces the same redaction.
infield matches → masked rows
{ "mask": ",", "deterministic": true }
✓ signed✓ sandboxedsha256:5b8790e8…
audit_logWrites the immutable audit record: what was processed, by which plugin, with which result.
inrun → audit record
{ "retention_days": 365 }
✓ signed✓ sandboxedsha256:4eb2c23c…
Explore other
solutions
Every solution runs on the same self-hosted engine. Your data stays where it lives, no matter the workload.
Redact where
your data lives
Show us a sample workload. We'll stand up an agent on your infrastructure, redact a real file in place, and hand you the audit trail. Nothing leaves your storage.