Overview
Personal Information Guard (PII Guard) is a configuration block available on every AI workflow node. When turned on, it detects personal data and replaces it with placeholders before the payload reaches the model, then handles the redacted content throughout the node run. Detection and redaction run in the data-privacy AI Platform service; the workflow node calls it synchronously and fails closed — if the service errors, the node stops and no redacted artifact is produced. PII Guard applies to Custom Agent, Intent Classification, Extract Data from File, and all AI Text, Document, Image, and Data Operations nodes.PII Guard is the AI-node-level privacy control. It is distinct from process-level data anonymization (
FLOWX_DATA_ANONYMIZATION), which redacts process data by role.Configuration
The guard is configured per node in the Designer. Turning it on exposes the detection options below.Supported entity types (24)
Supported entity types (24)
Universal (8)
EMAIL, PHONE, CREDIT_CARD, IBAN, MAC_ADDRESS, CRYPTO_WALLET, PERSON, ADDRESSRegional — EN (6)SSN, US_PASSPORT, US_BANK_ACCOUNT, US_ITIN, UK_NHS, EU_VAT_IDRegional — RO (10)CNP, CUI, RO_IBAN, RO_PHONE, RO_PASSPORT, RO_ID_CARD, LICENSE_PLATE, HEALTH_CARD, POSTAL_CODE, LANDLINEHow it works
- Input scan runs before the AI request is built, so placeholder substitution and user-message extraction both see redacted data. The system prompt is scanned alongside inputs, because operation-prompt templates may carry PII from earlier nodes.
- Source-file scan runs for document and image AI nodes. The data-privacy service uploads the redacted artifact back to the same storage as the source, so the file path used for the request is swapped without changing the data source binding.
- Output scan runs after the model completes, on a bounded-elastic scheduler so the data-privacy call does not pin the event loop.
- Restoration (deanonymization) — when an input scan ran, the guard keeps the placeholder-to-value mapping for the duration of the node run and automatically restores the original values in the model’s response, so downstream nodes and the end user see real data rather than placeholders. When an output scan is also on, PII the model newly introduced is redacted first, so only model-introduced values stay masked. Restoration also holds across chat-driven workflows that carry conversation memory.
- Irreversible redaction for async file flows — asynchronous document-parser flows keep permanent placeholders. Their mapping is never persisted, so values redacted in those flows are not restored.
- System-prompt appender — for Custom Agent nodes with an input scan, the runner appends a non-editable segment teaching the model to treat indexed placeholders like
<EMAIL_1>or<PERSON_2>as opaque tokens and copy them back verbatim. It runs after the prompt scan so its literal tags are not mistaken for PII. - Fail-closed — any error from the data-privacy service stops execution, including a failed restoration (the node halts rather than let placeholder data reach downstream nodes). The error surfaces on the node run log; redacted artifacts are not produced on failure.
Run-log and detections
Each enabled scan adds apersonalInformationGuard block on the node response:
Each item in
detections carries:
Document and image scans surface the same per-entity detail as text scans, so the run console shows the matched values, replacements, and confidences regardless of which AI node type produced them.
Setup
The data-privacy service connection is configured withFLOWX_DATAPRIVACY_BASEURL and FLOWX_DATAPRIVACY_TIMEOUTSECONDS — see the Integration Designer setup guide.
Related resources
Custom Agent node
Per-node configuration, including the PII Guard toggle
Extract Data from File
PII Guard on document and image extraction nodes
Intent Classification
PII Guard on intent classification nodes
Integration Designer
AI workflow nodes and their configuration