Skills Compliance

Auditing PII redaction

Support transcripts are among the densest personal data a company holds. In a single thread you can find a name, an email, a postal address, a phone number, a partial card number, a date of birth, an account balance, a reason for a payment, a health condition explaining a refund request, and a photograph of a document.

ComplianceData protectionAnalysisAny helpdeskRead-only
Installnpx rulebase-skills install cx-pii-redaction-audit

When to use it

Reach for this when someone says any of these — they are the phrases the skill itself triggers on:

  • is this export safe to share
  • check our redaction
  • can we use support transcripts for training
  • is there PII in this dataset

How it works

The method, in the order the skill runs it. The full procedure — tables, worked examples and the edge cases — is in the skill itself.

  1. Establish the purpose and the standard first

    Redaction is only meaningful against a stated purpose. "Enough for internal analytics" and "enough to send to a third-party model provider" are very different bars.

  2. Where the leaks actually are

    Redaction is usually applied to the obvious field and not to the others. Check every one of these; each has been a real source of leakage: Message bodies, Attachment filenames, Custom fields and metadata, which are frequently free text, URLs with identifiers, tokens or emails in query strings, Customer and requester objects, Bot and system messages, which echo back what the customer typed.

  3. Measure both error directions

    Redaction has two failure modes and reporting only one is misleading.

  4. What pattern matching reliably misses

    Regex-based redaction is a floor, not a solution. It systematically misses: Names, which have no pattern. This is the largest gap by volume, Addresses written conversationally, Unformatted numbers, International formats, Contextual disclosures, Indirect identifiers.

  5. Consistency, if you preserve structure

    If redaction replaces values with tokens rather than removing them, check.

Related skills

Free and open source, and vendor-neutral — it reads the conversations from whichever helpdesk you already run. Browse all 149 skills · connect your helpdesk over MCP · source on GitHub

Review every conversation. Act on what it finds.

AI for customer operations, built for financial services. Specialist agents chase every issue to resolution and every stalled customer to activation.

Rulebase dashboard