dlp

44 Dtwo policies tagged "dlp", including Airtable: Redact PII in Record Reads, Asana: Redact PII in Task & Comment Reads. Browse by what the control does rather than which app it targets.

On this page

Airtable

Airtable: Redact PII in Record Readsegress · AirtableScans the responses of the Airtable record-read tools — the calls that return row fields values — and rewrites high-confidence PII shapes to a fixed…

Asana

Asana: Redact PII in Task & Comment Readsegress · AsanaOn the Asana MCP read path, this transform scans the free-text business fields that ride back in task, comment/story, and status-update responses — notes,…

BigQuery

BigQuery: Redact PII in Query Resultsegress · BigQueryScans the content returned by BigQuery's result-returning tools and rewrites high-confidence PII shapes to fixed, non-recoverable redaction tokens before the…

Box

Box: Redact PII from File Content on Egressegress · BoxScans the responses of Box content-returning tools and rewrites personally identifiable information to fixed redaction tokens before the response reaches the…

Confluence

Block Secrets in Confluence Pages and Commentsingress · ConfluenceBlocks Confluence write calls whose body looks like it contains a live credential — an API key, password, token, or PEM-formatted private key — before the…Confluence: Redact PII from Page & Comment Responsesegress · ConfluenceScans the responses of Confluence page, comment, and search read tools and rewrites personally identifiable information to fixed redaction tokens before the…

Databricks

Databricks: Mask Cardholder PANs in Responsesegress · DatabricksMasks payment-card numbers (PANs) in Databricks tool responses before the agent receives them.Databricks: Redact PII in Tool Responsesegress · DatabricksScans the response payloads of the Databricks MCP tools that carry lakehouse data back to the agent and rewrites personally identifiable information to fixed…

DocuSign

Docusign: Redact SSN, Bank & Card Values on Egressegress · DocuSignScans the responses of Docusign envelope- and agreement-reading tools and rewrites high-confidence regulated identifiers before the response reaches the…

Dropbox

Dropbox: Redact PII, PANs, and Secrets in File Contentegress · DropboxScans the responses of the Dropbox file-content read tools and sanitises the returned text before it reaches the agent.

GitHub

Block Secrets in GitHub Commits & PRsingress · GitHubBlocks GitHub write tool calls whose payload looks like it carries a live credential into a repository, gist, pull request, or comment.GitHub: Redact Secrets from Read Responsesegress · GitHubScans the responses of GitHub's crown-jewel read tools and masks known credential shapes with a fixed [REDACTED-SECRET] marker before the text enters agent…

Glean

Glean: Redact PII from Read-Tool Responsesegress · GleanScans the responses of Glean's content-returning read tools and rewrites high-confidence PII to fixed redaction tokens before the response reaches the…

Gmail

Mask Card Numbers in Email Content Read by Agentsegress · GmailMasks payment-card-number (PAN) shapes in email content returned to agents by Gmail mailbox-read tools.

Google Calendar

Redact Attendee PII and Meeting Links in Calendar Readsegress · Google CalendarScrubs sensitive fields from the responses of Google Calendar read tools before they reach the agent, for callers who lack the placeholder calendar-full-read…

Google Drive

Google Drive: Redact PII from File Contentegress · Google DriveScans the responses of the content-returning Google Drive tools — file reads, downloads, and Docs/Sheets/Slides content fetches — and rewrites personally…

Gusto

Gusto: Redact Financial IDs in Responsesegress · GustoInstantiates PF-02 (redact-pii-egress) on the Gusto read path.

HubSpot

HubSpot Redact PIIegress · HubSpotRedacts sensitive contact information from HubSpot tool responses before they reach the caller.

Intercom

Cap Intercom Contact Enumerationingress · Intercomcaller is a CRM admin); clamp page size on everything else; allow the rest Intercom: Mask Card Numbers in Conversation Responsesegress · IntercomMasks payment-card numbers (PANs) in Intercom conversation content returned to agents by the conversation- and free-text-returning read tools.Intercom: Redact PII from Conversation & Contact Readsegress · IntercomScans the free-text returned by Intercom's conversation- and contact-read MCP tools and rewrites high-confidence personal identifiers and credential shapes…

Jira

JIRA: Redact Sensitive Information from Issue Viewsegress · JiraRedacts sensitive content from the responses of JIRA issue-view tools before they reach the caller.

Linear

Linear: Redact Customer Revenue and Contactsegress · LinearMasks commercial and contact identifiers in the responses of Linear's Customers read tools before they reach the agent.

Microsoft 365

Block Agent Email to External Recipientsingress · Microsoft 365Blocks agent-initiated Microsoft 365 email sends when any recipient address falls outside a corporate-domain allowlist.Microsoft 365: Redact PII from Mail, Files & Transcriptsegress · Microsoft 365Scans the responses of the highest-density PII read surfaces in Microsoft 365 — mail bodies, Excel ranges, SharePoint list items, meeting transcripts, and…

Monday.com

monday: Redact PII in Board & Doc Readsegress · Monday.comTwo egress controls in one policy, both scoped to the monday MCP read path:

NetSuite

NetSuite: Redact Financial PII in Responsesegress · NetSuiteInstantiates PF-02 (redact-pii-egress) on the NetSuite read path.

Notion

Notion: Redact PII from Read Responsesegress · NotionScans the responses of the Notion hosted MCP server's content-returning read tools and rewrites personally identifiable information to fixed redaction tokens…

Onboarding starters

Email Address Blockingress · Onboarding startersThis policy stops a request if it contains an email address. If there's no email address, the request goes through as normal.Email Address Redactionegress · Onboarding startersThis policy automatically masks email addresses in what a tool sends back, replacing each one with [REDACTED] before your agent ever sees it.

Power BI

Power BI: Redact PII in Query Resultsegress · Power BIScans the content returned by Power BI's result-returning tools and rewrites high-confidence PII shapes to fixed, non-recoverable redaction tokens before the…

QuickBooks

Cap QuickBooks Bulk Search Exportsingress · QuickBooksClamps the bulk-read levers on every QuickBooks Online search tool so an agent cannot pull the entire general ledger — or a full customer, vendor, or…QuickBooks: Redact Employee & Vendor PII on Readegress · QuickBooksOn the read path, this policy masks sensitive identifiers in the responses of four QuickBooks Online (QBO) name-entity read tools — get employee, search…

Salesforce

Salesforce Cap Bulk Data Exportingress · SalesforceBlocks bulk PII extraction through Salesforce query tools by inspecting the free-text query arguments that are the real policy surface for these servers.Salesforce Redact PIIegress · SalesforceRedacts personal contact information from Salesforce tool responses before they reach the caller.

Slack

Block Secrets in Slack Messagesingress · SlackBlocks Slack send-message tool calls whose message body looks like it contains a secret — API keys, passwords, tokens, or PEM-formatted private keys.Slack: Mask Card Numbers in Message and Search Responsesegress · SlackMasks payment-card numbers (PANs) in Slack content returned to agents by message-read, thread-read, canvas-read, history, and search tools.Slack: Redact Sensitive Information from Messagesingress · SlackRedacts sensitive content from outgoing Slack message arguments before the call reaches Slack.

Snowflake

Snowflake: Redact PII from Query Result Setsegress · SnowflakeScans the row content returned by the result-returning Snowflake MCP tools and rewrites personally identifiable information to fixed redaction tokens before…

Stripe

Stripe: Redact Customer PII from Bulk Readsegress · StripeMasks customer PII in the responses of Stripe's bulk PII egress channels before they reach the agent.

Tableau

Tableau: Redact PII & Mask PANs in Query Resultsegress · TableauTableau is a warehouse proxy: the data-returning tools stream raw row-level content out of whatever the published datasource connects to — PII, PHI, payroll,…

Zapier

Zapier: Mask Card Numbers in Read Responsesegress · ZapierMasks payment-card numbers (PANs) in Zapier MCP read responses before they reach the agent.

Zoom

Block Secrets in Zoom Team Chatingress · ZoomBlocks Zoom Team Chat send/update tool calls whose message content looks like it contains a live secret — API keys, passwords, bearer tokens, or…Zoom: Redact PII in Meeting Intelligenceegress · ZoomScans the responses of Zoom's meeting-intelligence read surfaces — AI summaries, verbatim transcripts, recording resources, and Zoom Docs content — and…