Sensitive Info Guardrail

The Sensitive Info Guardrail detects and redacts personally identifiable information (PII) as it flows through the gateway. PII redaction under Algeria Law 18-07 is already active on every OpenDunes request — no configuration required. The not-yet-available portion is the ability to tune categories, extend the list, and apply the guardrail to model outputs as well as inputs.

Not yet available. Per-request configuration and response-phase PII screening are tracked to be built.

What is redacted today (always-on)#

The following categories are detected and redacted from all prompts before they reach a model, in compliance with Algeria's Law 18-07 on personal data protection:

Redacted spans are replaced with a tagged placeholder, e.g. [NIN], [PHONE], [EMAIL].

Configurable categories (not yet available)#

Once per-request configuration is available, you will be able to extend or restrict the redaction list:

{
  "model": "google/gemini-2.5-pro",
  "messages": [{ "role": "user", "content": "..." }],
  "guardrails": {
    "sensitive_info": {
      "enabled": true,
      "action": "redact",
      "categories": ["nin", "phone", "ccp", "rib", "email", "name", "address"],
      "phase": "both"
    }
  }
}

Response-phase redaction#

When phase is set to "response" or "both", the guardrail also scans the model's output and redacts any PII before it reaches your application. This catches cases where a model surfaces sensitive information from its training data or reconstructs PII from context.

Data residency#

All redaction runs within OpenDunes' Algerian infrastructure. No prompt content is forwarded to a model until redaction is complete. The original (pre-redaction) text is never stored — only the redacted version is logged for audit purposes, and only for the retention period required under Law 18-07.

Audit trail#

Each redaction event is logged with the request ID, the category matched, the action taken, and a timestamp. Original matched values are never stored in the audit log. Logs are accessible in your dashboard and retained for 90 days.