AO

Governance & PII Security Studio

Column-level masking policies driven by PII_metadata_configs.json, applied through CREATE OR REPLACE VIEW functions.

Masking policies

6

column-level

High PII columns

4

aes-256-gcm

PII & Column-Level Masking Rule Builder

Applied through CREATE OR REPLACE VIEW masking functions

Dim_Tenant.email

pii:highmask_emailj***@domain.com

unmasked fordata_platform_adminsdata_engineers

Dim_Tenant.phone

pii:highmask_partialkeep last 3

unmasked fordata_platform_admins

Dim_Tenant.national_insurance_number

pii:highmask_full****

unmasked fordata_platform_admins

Dim_Tenant.date_of_birth

pii:highgeneralize_ageUnder 18 / 18-25 / 26-35 / 36-50 / 51-65 / 66+

unmasked fordata_analystsdata_engineers

Dim_Property.postcode

pii:mediumgeneralize_postcodeoutward + sector

unmasked fordata_analystsbusiness_users

Fact_Repairs.contractor_ref

pii:mediumhash_sha256salt=FL_2026_UK

unmasked forauditors