hipaa
42 Dtwo policies tagged "hipaa", including BigQuery: Redact PII in Query Results, Block Agent Email to External Recipients. Browse by what the control does rather than which app it targets.
On this page
BigQuery
BigQuery: Redact PII in Query ResultsScans the content returned by BigQuery's result-returning tools and rewrites high-confidence PII shapes to fixed, non-recoverable redaction tokens before the…Fence Regulated BigQuery Datasets by GroupFences customer-designated regulated BigQuery data domains by data-domain IdP group, at ingress, before any statement or metadata lookup reaches BigQuery.
Box
Box: Redact PII from File Content on EgressScans the responses of Box content-returning tools and rewrites personally identifiable information to fixed redaction tokens before the response reaches the…Fence Sensitive Box Folders by IdP GroupFences pinned sensitive Box subtrees (HR, Finance, Legal, …) by ID.Guard Box Share Links and External CollaborationsBlocks the externally-visible Box sharing surface — the riskiest Box surface an agent can touch — before the call ever reaches Box:
Confluence
Confluence: Redact PII from Page & Comment ResponsesScans the responses of Confluence page, comment, and search read tools and rewrites personally identifiable information to fixed redaction tokens before the…Fence Confluence Reads & Search to Non-Restricted SpacesFences a configurable set of restricted Confluence spaces (placeholder keys: HR, LEGAL, SEC) out of the agent's read and search paths unless the caller's IdP…
Databricks
Databricks: Redact PII in Tool ResponsesScans the response payloads of the Databricks MCP tools that carry lakehouse data back to the agent and rewrites personally identifiable information to fixed…Fence Sensitive Databricks SchemasFences off the most sensitive lakehouse namespaces from agents on the read side of Databricks.
Dropbox
Block Public Dropbox Share, Download, and File-Request LinksDenies, by default, the Dropbox tools that turn an internal file into an internet-visible resource in a single call — before the request ever reaches Dropbox:Dropbox: Redact PII, PANs, and Secrets in File ContentScans the responses of the Dropbox file-content read tools and sanitises the returned text before it reaches the agent.Fence Sensitive Dropbox Paths by TeamFences protected Dropbox subtrees by path prefix . Dropbox addresses files and folders by a root-relative path (/Finance/2026/payroll.
Glean
Cap Glean Bulk Search ExportClamps the bulk-export parameters on Glean search calls before they reach the Glean MCP server, so a single agent request cannot pull an entire indexed…Fence Glean Search by DatasourceGlean's search tool fans out across every system the tenant has indexed (Drive, Confluence, Slack, Jira, Gmail/Outlook, GitHub, Salesforce, Gong, HR…Glean: Redact PII from Read-Tool ResponsesScans the responses of Glean's content-returning read tools and rewrites high-confidence PII to fixed redaction tokens before the response reaches the…
Gmail
Deny Agent Email Sends to External RecipientsDenies Gmail send-class tool calls when any recipient in to, cc, or bcc falls outside a documented corporate-domain allowlist.Gmail Cap Bulk ExportThrottles mass-harvesting of a mailbox by capping the per-call blast radius of the two Gmail MCP surfaces that return many full email bodies at once:
Google Calendar
Block Calendar Invites to External AttendeesDenies Google Calendar event-write tool calls — create event / create-event, update event / update-event, and the consolidated manage event — whenever any…Redact Attendee PII and Meeting Links in Calendar ReadsScrubs sensitive fields from the responses of Google Calendar read tools before they reach the agent, for callers who lack the placeholder calendar-full-read…
Google Drive
Cap Google Drive Search & Listing Page SizesClamps the page size of Google Drive search and listing calls to a documented cap (25 results per call).Fence Restricted Google Drive Files and FoldersFences an admin-maintained denylist of restricted Google Drive file and folder IDs — HR records, M&A deal rooms, board packs, payroll — off the agent channel:Google Drive: Redact PII from File ContentScans the responses of the content-returning Google Drive tools — file reads, downloads, and Docs/Sheets/Slides content fetches — and rewrites personally…
HubSpot
Intercom
Cap Intercom Contact Enumerationcaller is a CRM admin); clamp page size on everything else; allow the restFence Intercom Contact & Company PII ReadsGates Intercom's structured-PII read surface — customer contact and company profiles — by IdP group.Intercom: Redact PII from Conversation & Contact ReadsScans the free-text returned by Intercom's conversation- and contact-read MCP tools and rewrites high-confidence personal identifiers and credential shapes…
Microsoft 365
Block Agent Email to External RecipientsBlocks agent-initiated Microsoft 365 email sends when any recipient address falls outside a corporate-domain allowlist.Guard OneDrive/SharePoint Share LinksStops agents from opening OneDrive/SharePoint files to the whole internet. It guards the two Microsoft 365 sharing tools:Microsoft 365: Redact PII from Mail, Files & TranscriptsScans the responses of the highest-density PII read surfaces in Microsoft 365 — mail bodies, Excel ranges, SharePoint list items, meeting transcripts, and…
Notion
Salesforce
Salesforce Cap Bulk Data ExportBlocks bulk PII extraction through Salesforce query tools by inspecting the free-text query arguments that are the real policy surface for these servers.Salesforce Redact PIIRedacts personal contact information from Salesforce tool responses before they reach the caller.
ServiceNow
Slack
Slack: Block Agent Posts to External ChannelsDenies Slack message-write calls whose destination is an externally shared Slack Connect channel.Slack: Deny Read/Search/Summarize of Sensitive ChannelsBlocks read, search, and summarize operations that target a configurable set of "sensitive" Slack channels.Slack: Redact Sensitive Information from MessagesRedacts sensitive content from outgoing Slack message arguments before the call reaches Slack.
Snowflake
Fence Snowflake Sensitive Schemas by Data DomainFences customer-designated sensitive data domains inside a Snowflake warehouse by inspecting the SQL text the agent is about to run — not by tool name, which…Snowflake: Redact PII from Query Result SetsScans the row content returned by the result-returning Snowflake MCP tools and rewrites personally identifiable information to fixed redaction tokens before…
Zoom
Block External Team Chat Invites & MembersStops a Zoom Team Chat agent from pulling external parties into the organization's chat surface.Gate Zoom Transcripts & Recordings by GroupGates retrieval of Zoom meeting transcripts, AI Companion summaries, and next-steps on the connector's core egress tools, enforcing minimum-necessary access:Zoom: Redact PII in Meeting IntelligenceScans the responses of Zoom's meeting-intelligence read surfaces — AI summaries, verbatim transcripts, recording resources, and Zoom Docs content — and…