Policy Definition

Policy configuration used by the AI Developer Edition API Service.

The superuser has all permissions, that is, protect, unprotect, and reprotect operations. Users assigned the admin role will receive protected data when performing an unprotect operation, except in the case of the text data elements, which will return null. All other user roles will receive null as the output for any unprotect operation.

Generic Data Elements

Data ElementMethodUse CaseUTF SetLPPPeIVRole
AdminFinanceMarketingHR
PUPUPUPU
datetimeTokenizationA date or datetime string. Formats accepted: YYYY/MM/DD HH:MM:SS and YYYY/MM/DD. Delimiters accepted: /, -
This data element is required.
N/AN/AN/ANo✓XXXX✓XX
datetime_ycTokenizationA date or datetime string. Formats accepted: YYYY/MM/DD HH:MM:SS and YYYY/MM/DD. Delimiters accepted: /, -
This data element is required. Leaves the year in the clear.
N/AN/AN/ANo✓XXXX✓XX
intTokenizationAn integer string (4 bytes).NumericNoNoYes✓XXXX✓XX
numberTokenizationA numeric string. May produce leading zeroes.NumericYesNoYes✓XXXX✓XX
stringTokenizationAn alphanumeric string.Latin + NumericYesNoYes✓XXXX✓XX
textEncryptionA long string, such as a comment field using any character set. Use hex or base64 encoding to utilize.AllNoNoYes✓XXXX✓XX
fpe_numericFPE (Format Preserving Encryption)Encrypts numeric data using FPE NIST 800-38G standard. Preserves length and uses Numeric (0-9) as plaintext and ciphertext alphabet.NumericYesYesYes✓XXXX✓XX
fpe_alphaFPE (Format Preserving Encryption)Encrypts alphabetic data using FPE NIST 800-38G standard. Preserves length and uses Alpha (a-z, A-Z) as plaintext and ciphertext alphabet.AlphaYesYesYes✓XXXX✓XX
fpe_alphanumericFPE (Format Preserving Encryption)Encrypts alphanumeric data using FPE NIST 800-38G standard. Preserves length and uses Alpha-Numeric (0-9, a-z, A-Z) as plaintext and ciphertext alphabet.Alpha-NumericYesYesYes✓XXXX✓XX
fpe_latin1_alphaFPE (Format Preserving Encryption)Encrypts alphabetic data using FPE NIST 800-38G standard. Preserves length and uses Unicode, such as Basic Latin and Latin-1 Supplement Alpha as plaintext and ciphertext alphabet.Unicode (Basic Latin + Latin-1 Supplement Alpha)YesYesYes✓XXXX✓XX
fpe_latin1_alphanumericFPE (Format Preserving Encryption)Encrypts alphanumeric data using FPE NIST 800-38G standard. Preserves length and uses Unicode, such as Basic Latin and Latin-1 Supplement Alpha-Numeric as plaintext and ciphertext alphabet.Unicode (Basic Latin + Latin-1 Supplement Alpha-Numeric)YesYesYes✓XXXX✓XX
maskMaskingMask all the characters in the input; output is configured as the mask. It is set to "mask".N/AN/AN/AN/A✓XXXX✓XX
no_encryptionNo EncryptionNo encryption applied to the data element.N/AN/AN/AN/A✓XXXX✓XX
shortTokenizationProtect or unprotect a 2-byte integer string.NumericYesYesYes✓XXXX✓XX
longTokenizationProtect or unprotect an 8-byte integer string.NumericYesYesYes✓XXXX✓XX

PCI DSS Data Elements

Data ElementMethodUse CaseUTF SetLPPPeIVRole
AdminFinanceMarketingHR
PUPUPUPU
ccnTokenizationCredit card numbers.NumericNoNoYes✓XX✓XXX✓
ccn_binTokenizationCredit card numbers. Leaves 8-digit BIN in the clear.NumericNoNoYes✓XX✓XXX✓
ibanTokenizationIBAN numbers. Preserves the length, case, and position of the input characters but may create invalid IBAN codes.Latin + NumericYesYesNo✓XX✓XXX✓
iban_ccTokenizationIBAN numbers. Leaves letters in the clear.Latin + NumericNoNoYes✓XX✓XXX✓

Generic PII Data Elements

Data ElementMethodUse CaseUTF SetLPPPeIVRole
AdminFinanceMarketingHR
PUPUPUPU
addressTokenizationStreet namesLatin + NumericYesNoYes✓XX✓XXX✓
cityTokenizationTown or city nameLatinYesNoYes✓XX✓X✓X✓
emailTokenizationEmail address. Leaves the domain in the clear.Latin + NumericYesNoYes✓XX✓X✓X✓
ninTokenizationNational Insurance Number. Preserves the length, case, and position of the input characters but may create invalid NIN codes.Latin + NumericYesYesNo✓XXXXXXX
nameTokenizationPerson's nameLatinYesNoYes✓XX✓X✓X✓
passportTokenizationPassport codes. Preserves the length, case, and position of the input characters but may create invalid passport numbers.Latin + NumericYesYesNo✓XXXXXXX
phoneTokenizationPhone number. May produce leading zeroes.Latin + NumericYesNoYes✓XXXXXXX
postcodeTokenizationPostal codes with digits and characters. Preserves the length, case, and position of the input characters but may create invalid post codes.Latin + numericYesYesNo✓XX✓X✓X✓
ssnTokenizationSocial Security Number (US)Latin + NumericYesNoYes✓XXXXXXX
zipcodeTokenizationZip codes with digits only. May produce leading zeroes.NumericYesNoYes✓XX✓X✓X✓

PII Data Elements

Data ElementMethodUse CaseUTF SetLPPPeIVRole
AdminFinanceMarketingHR
PUPUPUPU
address_deTokenizationStreet names (German)Latin + German + NumericYesNoYes✓XX✓XXX✓
address_frTokenizationStreet names (French)Latin + French + NumericYesNoYes✓XX✓XXX✓
city_deTokenizationTown or city name (German)Latin + GermanYesNoYes✓XX✓X✓X✓
city_frTokenizationTown or city name (French)Latin + FrenchYesNoYes✓XX✓X✓X✓
name_deTokenizationPerson's name (German)Latin + GermanYesNoYes✓XX✓X✓X✓
name_frTokenizationPerson's name (French)Latin + FrenchYesNoYes✓XX✓X✓X✓

LEGEND

  • eIV: External IV
  • LP: Length Preservation
  • PP: Position Preservation
  • P: User group can protect data
  • U: User group can unprotect data

Last modified : July 08, 2026