Skip to content
Roadmap0/111
deliverable D4Project 1

PII UUID-Swapping Gateway

Shared consumers: Project 2

What it is

PII UUID-Swapping Gateway (primary implementation; shared with Project 2). Add a pre-model and post-model boundary: detect candidate PII, validate the detection, replace values with scoped opaque tokens, keep the mapping in a protected vault, and restore only for the authorized caller and permitted output fields. Include tenant/session separation, collision handling, retention/deletion, access logging, and tests for partial matches, false negatives, token guessing, and leakage. UUID-shaped tokens alone do not provide privacy.

Every day that names D4

9