Data Masking

Configure data masking rules to protect sensitive information.

What is Data Masking?

Data masking replaces sensitive data with realistic but fake data, allowing you to work with datasets while protecting actual sensitive information. This is essential for development, testing, and analytics environments.

Masking Types

Full Masking

Replace entire values with masked characters:

  • Original: john.doe@email.com
  • Masked: ****************

Partial Masking

Mask only portions of the data while preserving some characters:

  • Email: j***@*****.com
  • Phone: (***) ***-1234
  • SSN: ***-**-6789
  • Credit Card: ****-****-****-4242

Format-Preserving Encryption

Encrypt data while maintaining its original format:

  • Original Phone: 555-123-4567
  • Encrypted: 847-291-6823

Substitution

Replace values with fake but realistic alternatives:

  • Original Name: John Doe
  • Substituted: Robert Smith

Built-in Detection Patterns

Guard automatically detects common sensitive data types:

Email user@domain.com
Phone (555) 123-4567
SSN 123-45-6789
Credit Card 4242-4242-4242-4242
IP Address 192.168.1.1
Date 1990-01-15

Creating Masking Rules

  1. Navigate to Connectors → Guard
  2. Select the connection to configure
  3. Click "Add Masking Rule"
  4. Select the table and column to mask
  5. Choose the masking type
  6. Configure masking options
  7. Save the rule

Important Note

Data masking applies to data displayed in the platform interfaces. Original data in your databases remains unchanged unless you explicitly export masked data.