Overview

The PII masking feature enables organizations to protect sensitive information by masking personally identifiable information (PII) fields in campaign previews. This ensures that PII data, such as user and event attributes, are not exposed on the UI, aligning with privacy standards.

You can use the Personalized Preview feature to validate content and test personalization without compromising customer data privacy. Fields marked as PII within the data management or Content API are masked, typically displayed as “XXXX” on the UI, while non-PII fields remain visible in plain text.

This feature enhances data privacy, prevents unauthorized PII exposure, and supports secure campaign testing.

Use Cases

Following are some of the use cases for the PII masking feature:

• If you want to test personalization in a campaign preview, PII masking hides sensitive information while displaying non-PII fields in plain text. This allows accurate content validation without revealing PII data.
•  If you need to fetch data from the Content API for campaign content, any fields marked as PII are automatically masked, preventing unauthorized access in UI previews and maintaining data privacy.
• If certain roles do not have permission to view PII, PII masking enforces privacy by masking PII fields in the personalized preview, ensuring that only authorized roles can access sensitive information.
• If you need to use the Personalized Preview to check rendering of content, PII masking safeguards customer data by masking sensitive information while allowing non-PII details to appear in plain text. This supports effective preview and testing without privacy risks.

Masked Attributes in Personalization Content

The PII masking feature ensures that user attributes, such as mobile number and last name, are visible only to administrators. For all other users, these attributes are displayed as “private.”

With this feature, you can mask PII fields in the user profile as well as in the personalized content.

With this update, any user or event attribute marked for masking also appears masked in personalization content. This applies to all channels that support personalization preview, ensuring masked values are consistently protected across the platform.

Masked Attributes in Content API

When adding a content API, you may receive PII in the response. This feature allows you to mask specific values in the API response to prevent unauthorized access to PII.

To do the same, perform the following steps:

1. On the Content API page, under the Actions column, click the ellipsis icon and then select Edit. For more information on creating personalized campaigns using content APIs, refer to Content APIs.
   
2. On the Edit Content API page, click Yes under Mask PII fields.
3. In the Select fields to mask list, select the fields you want to mask. For example, in the following image, we have selected coord. lon, coord.lat, and click Done.
   
4. Upon using this content API for personalizing content, the values of the selected fields in the previous step are masked.