Use case · PII and PHI in prompts

Personal data out of the prompt, before the model sees it.

A clinician pastes a discharge note. A developer pastes a customer record. Before the model sees the prompt, Raidu finds the personal data, replaces it with coded stand-ins such as PERSON_1, and sends the clean version to the model.

Runs inside your AWS, GCP or Kubernetes install.

Last reviewed

Illustrative. No customer data.

The difference

Their way, and ours.

Their wayRaidu
Hope the model doesn't retain it.Coded stand-ins go to the model in place of the real values; answers come back.
A generic warning: possible personal data.The exact type: date of birth, national ID, credit card number.
Detection in the app layer, after the user clicks send.Detection in your cloud, on the full assembled prompt, before a stream opens.

79 personal-data and credential types detected and replaced with coded stand-ins in your cloud, before the prompt reaches a model.

Source: Personal data detection service and entity registry

How Raidu handles it

How Raidu handles it.

  1. 01

    Assemble and inspect the full prompt

    Tower receives the prompt, including system prompt and every prior turn. The personal-data scan runs on the full assembled text before the model sees any of it. 79 entity types are checked in parallel: standard personal-data types and credential types.

  2. 02

    Replace with coded stand-ins

    Each detected item is replaced with a coded stand-in in the version sent to the model. The replacement is in your cloud. The model receives clean text and answers as if it had seen the original, but it hasn’t.

  3. 03

    Mask the response on the way back

    If the model echoes a coded stand-in in its answer, Raidu checks the response on the way back and masks any item that should not leave the session. Even streaming responses are checked as they arrive.

The product

See the screens.

Product windows from the films, with sample data. No customer data.

The record

The detection, on the record.

Every prompt with personal data lands on a tamper-evident record: what was found, what the model saw, and what the response contained.

Entry 4,189 AI Console · 14:02:11Z
Prompt
Summarise this discharge note for the family
Detected
4 personal-data types, replaced with coded stand-ins
Model received
Clean prompt, no personal data
Verdict
Allowed with coded stand-ins
Proof
Tamper-evident
sha256 18aee032a51e3da2031c35dbeb0a761c…
entry 4,189 of 18,437 · write-once

Common questions

Answered straight.

How many personal-data types does it detect?
79 entity types, including standard personal-data types (names, dates of birth, national IDs, health record numbers, and others) and credential types such as STRIPE_LIVE_KEY and GOOGLE_API_KEY.
Does detection slow the prompt down?
You choose how deep the checking goes for each use case. The pattern layer is fast; deeper checks add more protection.
What are coded stand-ins?
A label that stands in for a personal value, numbered so the context survives: a person becomes PERSON_1 and their record number MRN_1 everywhere in the conversation. The model can still follow who did what, but it does not receive the raw value.
Are responses also checked?
Yes. Responses are scanned on the way back, including streaming responses as they arrive. If the model echoes a coded stand-in in an answer, it is masked before the user sees it.
Where does this run?
Inside your own AWS, GCP or Kubernetes install. The personal data stays in your own network.
Does this work for agents and coding tools?
Yes. Agent Firewall scans tool output for personal data before the agent reads it. The IDE scan endpoint checks code snippets before they reach a model.

79 personal-data types caught. None reach a model.