POL-006 · All prompts & logs

PII masking required

Compiled into the runtime gateway and evaluated inline on every prompt, tool call and completion in scope. Owned by DPO.

highenforcingEdit in rule builder

Triggers / 30d

1,830

blocks, masks and escalations

Integrations bound

enforced at each connection

Severity

high

owner DPO

Added latency

7 ms

p99 within the 60 ms budget

Rule definition

Compiled expression

When

recogniser hit on stored payload

Then

mask in transit
mask in ledger

Compiled rule

rule "POL-006" {
  scope    = "All prompts & logs"
  severity = "high"
  when {
    recogniser hit on stored payload
  }
  then {
    mask in transit
    mask in ledger
  }
}

Governance metadata

Policy ID: POL-006
Owner: DPO
Scope: All prompts & logs
State: Enforcing inline
Catalog version: 2026.07.3
Last change: 2026-07-22 · approved by AI Council

Bound integrations

Where this rule executes

Azure OpenAI · gpt-4.1INT-LLM-01 · Microsoft Azure core.accounts.readINT-TOOL-01 · Core banking (Finacle)kyc.document.extractINT-TOOL-04 · Azure Doc Intelligence crm.case.updateINT-TOOL-05 · Salesforce FSC Contact Centre DesktopINT-APP-02 · Genesys Customer 360 (Restricted)INT-DATA-01 · Snowflake WhatsApp business channelINT-CH-02 · Meta